iOS/OSX SSL Vulnerability
iSpeech
Apple released a patch for iOS devices on February 21, 2014. This patch fixes a security flaw in the way that the Secure Sockets Layer protocol was implemented. The underlying security issue is extremely devastating. It allows a malicious third party to mount a man-in-the-middle attack that would allow them to decipher any SSL-encrypted communication between an iOS device and a web server (note that the flaw also applies to OS X devices as well). The upshot is that the confidentiality of the data being communicated to and from the device is violated, even though the end user thinks everything is OK. In this video, Elastica's CTO Dr. Zulfikar Ramzan describes the mechanics of this flaw so that you can better understand its implications. In either case, you should update your devices immediately from a safe location (e.g., avoiding any public hotspots).
Check out additional SOC talks at http://www.elastica.net
Facebook - https://www.facebook.com/ElasticaInc
Twitter - http://www.twitter.com/ElasticaInc
LinkedIn - http://www.linkedin.com/company/Elastica
Likes: 2
Viewed:
source
Gloss