Skip to comments.Apple Says iOS, OSX and “Key Web Services” Not Affected by Heartbleed Security Flaw
Posted on 04/11/2014 5:58:05 PM PDT by Swordmaker
Apple said Thursday that its mobile, desktop and Web services werent affected by a major flaw in a set of security software used by hundreds of thousands of websites.
The flaw, codenamed Heartbleed and first reported by Web security firm Codenomicon, was discovered in a technology called OpenSSL a set of encryption software used by Web companies to safeguard user information. Sites that use OpenSSL will display a small lock icon in the top left-hand corner of your Web browsers address bar (though not all sites showing this lock use OpenSSL); the technology is used on more than two-thirds of websites across the Internet.
Apple takes security very seriously. IOS and OS X never incorporated the vulnerable software and key Web-based services were not affected, an Apple spokesperson told Re/code.
Apples statement comes in the days after the disclosure rocked companies and Web security wonks across the world; security expert Bruce Schneier called Heartbleed catastrophic in a blog post this week. On the scale of 1 to 10, this is an 11, he wrote.
Major Internet firms scrambled to issue patches to fix the flaw in their Web services in the following days, but companies like Facebook, Google and Yahoo all admitted periods of time in which their services could have been susceptible to the Heartbleed flaw.
Security experts have reminded users to update passwords across any sites that may have been affected, but only after the companies have updated their security software.
It has also been suggested that people start using password management tools like Lastpass, 1Password and Apples own Safari Browser password generator in order to keep track of multiple passwords across various accounts, rather than using one single password phrase for every account.
If you want on or off the Mac Ping List, Freepmail me.
I will be using Safari’s password generator from now on!
A better approach is to use a pass phrase such as:
It’s a nonsense phrase that’s easy to memorize because it’s silly but impossible for a heuristic generator to guess. It includes upper and lowercase and numbers, meeting most password requirements.
Thanks for the ping...
If I need to model something critical like stress analysis on a primary mechanical linkage, joint, or weld, let alone realtime motion or deformation analysis, I am certainly NOT going to look for any apple machines for a solution.
This is why we Engineers always start grinning and smothering laughter when some macophile newbie asks when the five-figure (and up) high-end software we rely upon will be ported to the mac OS. As well ask when a version will be started upon to run on a PS2. *snicker*
You’re slipping. It took almost an hour for the Apple haters to toss a nasty comment unrelated to the thread. Bizarre.
ping for later discussion ..
Um, yes, you are. Granted, your phone is probably safe, but your bank account isn't specially protected just because you're using an Apple product to access it.
I know: "I've made up my mind! Don't confuse me with the facts!"
Well, I use that approach ( a combination of numbers/caps/phrases) with all my various passwords, but was under the impression that anything I conjured up could be grabbed by the “hack”.
Am I wrong?
I am old enough to remember life before the internet. Got along without it before I met it, and could get along without it now.
If it comes to that, of course. But think of the hit on the economy?
My suspicious mind does wander into “tin-foil fashion accessories” from time to time, and is now is wondering if this is just the preamble to a .gov excuse to take it all over.
I really don’t care at this point. They will ultimately fail, for they forget that we are not as stupid as they think, and actually can find myriad creative ways around them, if we are clever and quiet.
“Well, aren’t you special”
Is it just only all about you, and how incredibly intelligent you are, compared to all of us clueless fools out here in fly-over land.
Are you trying to be the first to get voted off the island, for being a jerk?
Many of us made a very good living using Macs, and never had to have an expensive IT team to keep us up and running 24/7, and we managed to keep investors very happy as we were entrusted with more of their money than you ever dreamed of making.
My husband was an MIT graduate, and would never switch to a PC. But, he was an independent thinker, and ran his own profitable business, unlike most of you cubicle drones.
Sorry if I am being harsh. It is late, and I miss him so much. And you Mac haters are so blind to the bigger picture.
A computer is just a tool one uses to get a specific job accomplished. Your job requires one type of tool - but your expertise in that specific use doesn’t qualify you as any kind of expert in what works in endeavors outside of your narrow specialty.
In short, stuff it, or risk being tossed off the island, because you offer nothing but negativity, caused by your lack of vision. You seem only able to feel the tail of the elephant, and have missed the whole of the animal.
“Interesting. So you believe that if someone merely points out the inherent flaws in anything related to apple or other graphics boxen, they are ‘apple-haters’? You sound like the persons at okkcupid who protest so loudly that someone who is for traditional marriage is a “homophobe”.
Yes, Utilizer, anything short of glowing approval on an apple thread is hate. It’s in the FR manual somewhere.
“Um, yes, you are. Granted, your phone is probably safe, but your bank account isn’t specially protected just because you’re using an Apple product to access it.”
“As Cluley tells us (in a request to correct a mistake in this article), This isnt Apples problem and theres nothing for them to fix. But that doesnt mean Apple users are safe from the effects of Heartbleed. All internet users were at risk if connecting to vulnerable online services - regardless of the platform they were using.
from Apple Says Heartbleed Doesnt Affect iOS, OS X, and Its Web Services [Updated]
Kind of like you said.
I do not state My positions based upon some archaic designations of "I am better than Thee", but upon some real world experience in the electronics industry.
Macophiles are all the same. The equivalent of the French who view anyone who does not fluently speak the true and unaccented lingua franca as truly beneath contempt. "American TOURISTTE -I spit upon you! Patoooie! Patooie!"
I know hardware. I know a bit about coding. I can recognize a good painting from the graffiti sprayed upon walls, and readily acknowledge the skills inherent upon the artists I have known throughout life. That is not the same as giving the same due as those individuals who can understand and work with machine code, as those are two very separate disciplines.
I do not denigrate macs for what capabilities they possess. If I ever wish to create My own version of a Monet, I might look at a mac indeed. If I wish to play a very realistic computer game then I would indeed look at a PS2 or xbox for that.
Merely stating that those platforms are not designed to accommodate some true processing power should not in any way equate to lessening what they are capable of. You can run a business, I suppose, on a mac. After all, they can handle forms and printing things quite well. However, immediately assuming that because they can work smoothly with graphics-based applications means that they can handle anything else there is... is, I hesitate to inform you, not realistic.
They can do pretty pictures and cute fonts well, or so I am told.
For real-world computing tasks... sorry, but other platforms are far better suited.
If you are offended by that for whatever reason(s)...
I have no method I can think of available to Me to convince you that responding emotionally to a task in the real world is not the best way available to accomplish the majority of challenges that come about. For personal interactions, perhaps. For computational requirements, not so much.
Enjoy your mac. And your memories. When I need to design a critical component, your emotionally-laden comments will help not a whit when I need to create something that lives may depend upon.
But a pretty picture might help afterwards, if you like.
As far as "money" is concerned, I have never spoken about it in any of My posts. It seems to be of great concern to you, however, so enjoy by all means. I will not discuss such matters as monetary wealth with you or anyone else in this or any other forum.
As far as being only able to see the "tail of the elephant", I am not the one who descended to anatomical references in order to attempt to denigrate another with such poor attempts of humor in lieu of realistic refutations, and your attempts to mitigate My statements thus far are assuredly not addressing the points I addressed, if not purposefully disingenuous at least in part. Or deflective at the very least, in particular in regards to the points I illustrated in My original post.
I am truly sorry of you are offended by it.. no, actually I think not. If the only response you are willing to offer is that a graphics boxen is no less useful than a machine capable of processing more engineering- and physics- related computations, then nothing I can say will change your emotionally-invested viewpoint.
That does not mean I will ever look for a mac, xbox, or ps2 to accomplish the computations that I am determined to solve at any time. Paint a picture? probably. Design a flyer? OK. Layout a newspaper -sure. Even play a computer game I can certainly see.
Even macs have their useage, after all.
Oh? I guess scientist, engineers, and programers will never be using the toy Apple Mac computers, will they, Utilizer? According to you the Mac's just aren't up to it. . . They ain't capable. After all. It ain't rocket science. . . Right?
Hey! Utilizer, what ARE all those notebooks those engineers and scientists are using at NASA's AMES SPACE CENTER? I guess they couldn't be MacBook Pros. Nah.
You said they aren't capable!
Your are aware that Apple Mac OSX is certified POSIX compatible, TradeMarked UNIX, are you not? Further, you should be aware that several PC Magazines have rated the best WINDOWS PC notebook is an Apple MacBook Pro. . . Oh, you aren't. That's even running in a sandbox inside OSX. . . . And are you aware there are people happily running CATIA on Apple Macs? Older versions run in UNIX. So much for your snickering.
Apparently, you are not joking, mate. Macophiles just seem to have an instant knee-jerk reaction to anyone not accepting that their graphics boxen are not greater in capabilities than any other mere platform as blasphemy of the worst sort.
If I happen to mention the truth in these postings, I suppose it is only natural that the Cult Of Apple Uber Alles would take offence. Not that any observations I have posted over the years would make any difference in their positions even after all this time, I see.
I can not help it if I state what I know to be true.
I have a guy literally stalking me on another thread cause I dared to interrupt their worship service.
Here’s where he started.
Why you are right! And the DVD player with the A/V input cord which can display the same image as the ones you posted is now proven to be just a powerful as any mac!
When you can show examples of a mac, xbox, ps2, or an atari 2600 crunching through the compilation of a new kernel, or the muscle behind the programs I use to design products instead of merely reflecting text and an image, then they will indeed have grown up.
Until then, post all the pretty pictures you wish.
When you place an ad in Engineering Digest challenging the other companies to come up with a faster or at least semi-equivalent program to run on your graphics boxen to churn through real-world computations, then will I accept that at least a part of the graphics processor is valuable in designing the components I work with on a daily basis.
Until then, I look forward to your next posting of the newest "Field of Daisies", no doubt.
So you're told? You have the gall to enter an Apple thread to spout MYTHs and tell us the capabilities of our computers based on HEARSAY? Them is some cojones my friend. Frankly, as demonstrated in my above post, you literally don't know what you're talking about.
Several Reviewers recently attempted to build a Windows PC to match the specs and processing power of the top of the line Apple Mac Pro and they literally COULD NOT DO IT. The components were not yet available anywhere near the price Apple was shipping the completed retail, guaranteed Mac Pro for. . . and some components couldn't be had at any price. It's computational power blew every workstation away. A lot of number crunching can be handed off to the GPUs which can turn in 7 Teraflops. . . Twelve core INTEL XEON PROCESSOR. 7- 20GB per second Thunderbolt ports, USB 3, HDMI, All contained in a virtually silent 6" by 9" chassis. Oh! and made in the USA.
Incidentally, the reviewers tried to find a combination in which a Windows PC with close specs was less expensive than the similarly specced (but always more powerful) Mac Pro and the PC was always more expensive.
I finally stopped laughing enough to respond to that post! *wipes tears from eyes*
Those are TERMINALs, mate. In other words, they are graphics-accentuated DISPLAYS. Oh, you macophiles are just too self-important for words! *snicker*
I have a 486-DX4-120 that can handle 63 of those displays at one time -although, I must admit not with the REALLY pretty fonts that your fellow adherants seem to prefer, and could do quite a few more if I felt it necessary.
However, very well. I suppose that in your mind the posting of some terminals being accessed by macbooks makes you somehow "cool" to others, so enjoy. *grin*
When I start to feel the need for faster speeds than Pentium -66 speeds for raw processing power, I suppose I might begin to look at your terminal (x-windows, of a sort) boxen for some useage. Until then, the pretty fonts and the nice backgrounds will look quite lovely when I bring someone by to play...
If they DON'T use hashtags, then, yes, there could be a problem. . . but all commercial sites do.
The problem with using password generators is they come up with excellent, hard-to-hack secure, but impossible to memorize passwords. Using a silly, inane nonsense phrase of disconnected but seemingly normal words that COULD mean something is much easier, but equally secure.
Funny, memorable, secure
If it is indeed as helpful as you say then I may try it out. If it does not do what I need it to do, then at the very least I will know where its computational underpinnings are causing difficulties and can go from there.
Thanks much for the reference, mate.
Are you really as stupid as you are coming across? There is NOTHING INHERENTLY SUPERIOR ABOUT YOUR WINDOW BOXES. These scientist and engineers are not choosing Macs because they make great "terminals", any more than they choose a Windows machine for that purpose. If that were the case, they'd choose the cheapest "terminal" computer they could. These engineers chose Macs for good serious reasons. Contrary to your asinine claims which you stated were based on hearsay. Do you even know what UNIX is, or what it is capable of?
Just a word of advice.
They chose those macs because they got a great deal from apple for some fancy displays. NONE of the graphicboxen you refer to were actually involved in any way with any actual real-world activities. I should know. I was at the AMES Research Center when the first Mars Lander photos came in.
But, feel free to believe that those machines (laptops) were doing something grand. I would be the last to take away such a momentous occasion from you...
You know Utilizer. . . I just realized you don't really know what it takes to really DO graphics, do you? Think about the sheer computational power necessary to do reality ray tracing in a three-dimensional scene in a 32 bit, 1080P HD 3D video. If you want it in real time, the new Mac Pro can do THAT and it can do it only slightly slower in 4000 line HD video! The Computational power of the Macs that you are so denigrating because they do "graphics" can do that. . . and handling your piddly CAD/CAM work is child's play compared to that kind of computation and precision. Graphics work is among the highest and heaviest computation a computer can be put to doing.
AutoCad is available for the Macthe Mac is where CAD/CAM started . . . Hell, autoCad has made a 3D CAD App for the iPad. Cad/Cam doesn't take computational horsepower. . . just good programs. I know of a machine shop that has a CAD/CAM system running their 12 computer controlled lathes on Commodore C-64s. It gets the job done for some very complex shapes. . . But it's a bear to program. . . and he has stacks of extra C-64s, 1541 disk drives, 1702 monitors, and a crate of power bricks in the back. But the owner has a hell of a time finding 8.25" floppy disks. . . I told him when I last saw him some Chinese company had put a C-64 on a Flash Drive for playing games. As I said, CAD/CAM doesn't take a lot of oomph.
Consider this scene from Avatar:
Now think of 24 of those for every second of film for that scene. Everything in it, including Jake Scully, is CAD, composed of millions of triangles, then color and texture applied, then light traced, calculating blur, haze, motion of multiple items, TWICEfrom a slightly different angle.
The Macs you so blithely dismiss as mere graphic computers are capable of rendering that scene. . . and the Mac Pro is capable of creating itin real timewith dual graphic cards that produce 7 TERAFLOPS of computational power.
Just eleven years ago, the third fastest supercomputer in the world was built by Virginia Tech using 1100 networked dual processor desktop PowerMacs for about $6 million. Most of that money was for a building, racks, and cooling. Even at that price it was one quarter the price of the 2nd fastest supercomputer. . . and one tenth the price of the fastest that year. However, what's important is that those 1100 PowerMacs were capable of producing 10.5 Teraflops.
The 2013-2014 MacPro, all 1 of it, can produce 7 Teraflops all by itself! Cost? Under $3000 in its basic configuration.
No, they didn't. Apple did not supply Ames with any "special deal." US government procurement specifications during the Obama administration has required Windows PCs. Purchasing Macs requires almost an act of Congress. Those are personal computers. First you are a CAD/CAM designer. Now you are a engineer at Ames Research Center. Which is it? Even if you were there as one of the contractors, I would HIGHLY doubt they discussed computer procurement with you.
Note the evidence of your making your claim up: There is a mix of computers in that crowd. Right in front is one with a PC. There are at least five different models of MacBook that I can see on the desks. In the back is a fellow holding an older black MacBook. They are all different vintages. The young lady in the middle appears to have a MacBook Air. A guy in the back seems to have a 17" model. . . That'd be vintage 2007-8. No, Utilizer. You're making things up that just don't hold water and don't comport with what I have read about the NASA engineers buying their own because they hated the Windows notebooks.
1Password is having a heart bleed sale on MAC & iOS app stores. 50% off for their password manager program; $24.99 & $8.99 respectively.
Ah, but Hackintosh builders might be, if this heartbleed thing is in the kernel.
Interesting. You sound like the homos who march into a bakery run by straight bakers and want to force them to make a queer cake for them. If you don’t like the way they make their products that the masses like, don’t go into their store making a ruckus.
I know: “But I made up my mind and hate your stuff! Don’t confuse me with stuff I have no intention of buying that most other people like!”
Hi Swordmaker! Thank you for Article! I appreciate it. Nice to know. I am all apple now. I feel safer. Thanks again!
My FRient - what is the point of putting up a defense? Those who hate all things Apple (at least 99% of them), the hate is much like the irrational hatred of God that supposedly leads to Atheism.
You could hold their hand, sit down with them, and walk them step-by-step through every fine detail - with irrefutable evidence, and they would absolutely refuse to accept that anything produced by the “Homo-company Apple” (their view) could do anything positive at all, much less be more than competitive, while being far more reliable.
Reminds me so vividly of some of the irrational Ford vs Chevy vs Dodge fights I have witnessed. Yes - I have a preference in the above three brands, but I don’t get rabid, I don’t accept every rumor or crazy negative that floats around about any of the three - I base my views on my experience and history, and don’t try to argue, cuss, or name-call my views into anyone else., and I certainly don’t go trolling those other brand threads on message boards just for spouting the garbage (or even my own experience unless I have a very specific connection to the discussion).