By AbleTec, 23 February, 2014
iOS and iPadOS
There's a new update for IOS 7 (7.0.6) The post describing this update & why it's so critical can be found at: http://www.welivesecurity.com/2014/02/22/urgent-iphone-and-ipad-security-update-mac-os-x-pending/?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+eset%2Fblog+%28ESET+Blog%3A+We+Live+Security%29 I'm going to briefly summarize the post by quoting relevant portions below. "until you upgrade, your i-device has “a critical vulnerability that could allow hackers to intercept what should have been secure communications between your iPhone and SSL-protected websites.” SSL is what online banks and stores use to protect your electronic interaction with them. It is signified by the little padlock icon that shows up in the browser address bar, next to “https://address” and so on. As Graham notes, the problem Apple is fixing with this update potentially means that “online attackers could grab your userid or passwords as you attempted to log into popular websites.” Since SSL is also used to verify software updates, sometimes called patches, those present another possible avenue of attack for the bad guys looking to take over these devices. What does that mean? You should do your iOS 7.0.6 update over a trusted network, not the open Wi-Fi at your local coffee shop (unless you know the owner is also security geek or you’re a security pro yourself and installed the system for her). At this point my main concern is that the bad guys have reverse engineered the fix and now know how to target the vulnerability on unpatched systems. A serious secondary concern is that not everyone with an i-device is seeing a message from Apple urging them to upgrade. In the past, I know the Settings icon on my iPhone has sported a numeric badge telling me that I need to upgrade, but I have not yet seen one for iOS 7.0.6. (and a non-scientific survey of friends tells me I am not alone). Another potential obstacle to rapid and universal plugging of this attack vector is that “a fix for SSL connection verification” does not read like an appealing reason to upgrade, particularly for the millions of users who have no idea what SSL is, despite using it every day. So let me just repeat that this is an important update. Encouraging friends and family who have iOS devices to go ahead with the update is the right thing to do. As for Apple Mac laptops and desktops, the situation is that they too have this SSL vulnerability and the update is not yet released. If you, like me, are using a Mac, you need to stay alert for the release of the fix and install it right away, over a known good network. One precaution you can take is to use Firefox or Chrome as your browser as these will abort vulnerable connections. You can check this using a web page at gotofail.com. • On unpatched mobile and laptop devices, set “Ask to Join Networks” setting to OFF, which will prevent them from showing prompts to connect to untrusted networks."" HTH, all.
I haven't received an alert
Minimal Risk, But Backup Apps First
Backing up apps
re: backing up apps
Thanks, Justin. I went on
I use Itunes
I just updated my phone
What's bad about updating with iTunes?
Re: What's bad about updating with iTunes?
What's bad about updating with iTunes?
About 99 percent of the time,
About 99 percent of the time, the operator of the device is at fault when they say stuff happens and should not during an iTunes update. Frankly they should by now learn to back up their phone before the update, then just follow the prompts. In the 4 years I've owned an iPhone I have never ever lost any apps, music, ring tones etc and my back ups were both incripted and unencrypted.
I love OTa but I always download the ipsw file just in case I have to restore off line, for example if I'm at school or what ever.
I do agree though, you should update when you see an announcement on twitter/facebook or in the iPhone's settings. You never know
Tc all and be blessed.
Any Voice Over Issues with 7.06 Update?
I haven't had any new
re: voice over problems
I see one problem and I'm not sure how long it's been around, but my phone will appear to freeze and vo will cease to function. I have to reset the spring board or do a reboot, either or, and sometimes reenable voice over with triple click home. I'm hoping ios7.1 when it comes out will fix this.
voiceOver bugs on the new update.
My iPhone 5C and iPod touch
I have the problem with my 5
I have the problem with my 5 and saw it today with the update. I'm seeing it more in fact which is scaring me. I just did a system wide restore so we'll see if that helped So far it looks like it has. I'll keep playing with it and see.
how to fix ssl bug without updating
I had to update through iTunes.
updating through iTunes
I just updated OTA try that
I just updated OTA try that and it might or might not work better.
Be more specific when giving error messages. We cannot read your mind. This will help us troubleshoot the problem, and make our lives as tech support easier.
No Longer an Issue
you don't need to update your phone to your computer. You will
You don't need to update iOs onto your computer. You can just update it over the air and it will not erase all of your apps. If you wanna erase all of you apps, you can do a full restore or update. Over the air I recommend.