For those of you who haven’t heard, recently Apple released a very important update for Mac OS X, iPhones and iPads. Essentially, if you are running Safari, Mail, or other apps where you depend on security, your encrypted communications (passwords, bank info, health info, student records) may be obtainable.
Not sure? Visit https://gotofail.com.
Now, this does rely on someone having access to your network to see your communications, which in many cases isn’t trivial, but this type of issue has blown the minds of many. For those who haven’t dug into the details, there are several excellent blogs on the topic, but for our readers, it comes down to a single line repeated[1]:
goto fail;
goto fail;
There are a variety of excellent pieces on this bug if you would like to learn more, but for now, get updated!
- https://www.imperialviolet.org/2014/02/22/applebug.html ↩