iOS 8 fixes bucketload of severe security bugs

  • 18 September 2014
  • 2 replies
  • 15 views

Userlevel 7
Badge +54
Posted on 18 September 2014. Apple has released the latest version of its mobile OS on Wednesday, and in it has fixed over 50 vulnerabilities, many of which are very serious:
  • Two vulnerabilities allowed a local attacker to escalate privileges and install unverified (likely malicious) applications
  • A validation issue in the handling of update check responses allowed an attacker with a privileged network position to cause an iOS device to think that it is up to date even when it is not
  • Two vulnerabilities in CoreGraphics made it possible for a maliciously crafted PDF file to terminate apps or execute arbitrary code
Full Article

2 replies

Userlevel 7
Badge +54
Posted on 18 September 2014.With the release of iOS 8, Apple has also updated its Privacy Policy.

"The changes were made predominantly to cover new features in iOS 8, or to provide additional information on current use of data such as your date of birth or information you’ve provided about others," the company explained in the introduction.

The change was accompanied with a message from Apple CEO Tim Cook: Full Article
Userlevel 7
By AFP on September 18, 2014
 
WASHINGTON - Apple is rolling out new privacy protections for iPhones and iPads, with a new system that makes it impossible for the company to unlock a device even with a warrant.
Apple's privacy terms updated late Wednesday indicate that under its new mobile operating system, iOS 8, the company will not have access to customer passwords.
"Your personal data such as photos, messages (including attachments), email, contacts, call history, iTunes content, notes, and reminders, is placed under the protection of your passcode," says the new policy on Apple's website.
"Unlike our competitors, Apple cannot bypass your passcode and therefore cannot access this data. So it's not technically feasible for us to respond to government warrants for the extraction of this data from devices in their possession running iOS 8."
The iOS 8 operating system is available on the iPhone 6, which goes on sale Friday, and can be installed on many existing iPhones and iPads.
 
SecurityWeek/ full article here/ http://www.securityweek.com/apples-new-encryption-lock-out-government

Reply