February 2014 MSS Newsflash 2
Details on the Apple SSL/TSL bug
If you've not already, update to iOS 7.0.6 or 6.1.6 on your iPhone, iPad, or iPod Touch immediately. No Macintosh operating systems except OS X 10.9 "Mavericks" impacted. If you read our recent newsletter, you should have by now updated your iPhone, iPad, or iPod Touch. If you haven't, please do so. (Settings > General > Software Update)
Apple has confirmed that they will be patching this bug on the Mac very soon. Happily, for a great many of us, it turns out that this bug does not exist in any Mac operating system except OS X 10.9 "Mavericks." If you've done as we've advised and NOT upgraded your Mac operating system to Mavericks, you've remained secure. As we've said, new operating systems always contain bugs—usually not this egregious—and this type of thing is exactly why we advise waiting. If you've taken our advice, you can rest easy. No action is required on your part.
If you've upgraded to Mavericks or if you're using a new Mac with Mavericks pre-installed, then we advise doing no internet transactions in which you would normally have an expectation of security (banking, shopping, etc.). Until this bug is patched, those transactions can look secure but they are not. Be on the look out for a software update from Apple in the early part of this week.
|
|
|