Apple 修復 iOS7 Security Bug - iOS

Tech Crunch
http://goo.gl/D3Jj9l

Yesterday Apple Fixed A Bug In iOS 7. It's A Doozy


內文引述 Wired：

“[The] terse description in Apple’s announcement yesterday had some of the
internet’s top crypto experts wondering aloud about the exact nature of the
bug. Then, as they began learning the details privately, they retreated into
what might be described as stunned silence. “Ok, I know what the Apple bug
is,” tweeted Matthew Green, a cryptography professor at Johns Hopkins. “And
it is bad. Really bad.”


總之看起來是一個可以讓駭客讀取本該加密的 email 或其他通訊內容。

ZDNet 說：

“The vulnerability allows anyone with a certificate signed by a "trusted CA"
to do a man-in-the-middle (MITM) attack.

Make no mistake about it, this is a very serious bug. The bug makes it fairly
straightforward to intercept and decrypt SSL/TLS communications, probably the
most important security protocol there is today.”


預計 iOS 7.0.6 會 patch 這問題。

--
◢▇▆▇◣ 我八月八號當天自己開車到行政院辦公，我六點才回家！八月九號當天一早
▌′ ‵▌ 就搭當天第一班喔！當天的第一班唷！八月八號我剛剛講我在福華是為什麼
○─○ ，因為那一天是父親節。八月八號當天，自己開車去行政院辦公，我六點才
︶ひ︶ 回家。而且是父親節耶！是父親節耶！她必須道歉，因為這個—父親節你去
∕▆﹨ 去外面吃個飯，還—過分嗎？你知道那邊的資訊嗎？知道災情非常不好，我
◣ ▂ ◢ 們第二天馬上搭最早的車喔！最早的高鐵！謝謝！（掛電話）嘟嘟嘟嘟嘟—

--