Boffins reveal password-killer 0days for iOS and OS X

#1

Post by moe » Wed, Jun 17, 2015, 10:42 AM UTC

Boffins reveal password-killer 0days for iOS and OS X
theregister.co.uk

Re: Boffins reveal password-killer 0days for iOS and OS X

#2

Post by [deleted] » Wed, Jun 17, 2015, 11:14 AM UTC

[deleted]

Re: Boffins reveal password-killer 0days for iOS and OS X

#3

Post by therealmarv » Wed, Jun 17, 2015, 11:16 AM UTC

So Apple was aware of this for 6 months and are doing NOTHING, not even communicating?! How serious do they take security and fixing it (at least within 6 months) ?

Re: Boffins reveal password-killer 0days for iOS and OS X

#4

Post by [deleted] » Wed, Jun 17, 2015, 11:16 AM UTC

[deleted]

Re: Boffins reveal password-killer 0days for iOS and OS X

#5

Post by dotpot » Wed, Jun 17, 2015, 11:19 AM UTC

therealmarv wrote: post #3

So Apple was aware of this for 6 months and are doing NOTHING, not even communicating?! How serious do they take security and fixing it (at least within 6 months) ?

exactly....

Re: Boffins reveal password-killer 0days for iOS and OS X

#6

Post by coldtea » Wed, Jun 17, 2015, 11:28 AM UTC

therealmarv wrote: post #3

So Apple was aware of this for 6 months and are doing NOTHING, not even communicating?! How serious do they take security and fixing it (at least within 6 months) ?

>"and are doing NOTHING"

Citation needed. An article (and on the Register at that) is not any indication that "they're doing nothing"...

Re: Boffins reveal password-killer 0days for iOS and OS X

#7

Post by webdevsimon » Wed, Jun 17, 2015, 11:29 AM UTC

therealmarv wrote: post #3

So Apple was aware of this for 6 months and are doing NOTHING, not even communicating?! How serious do they take security and fixing it (at least within 6 months) ?

How do you know they was aware if they didn't "not even communicating"?

Re: Boffins reveal password-killer 0days for iOS and OS X

#8

Post by StavrosK » Wed, Jun 17, 2015, 11:29 AM UTC

"Boffins"? Isn't that rather dismissive, as in "oh, look at what those crazy boffins cooked up now!"?

Re: Boffins reveal password-killer 0days for iOS and OS X

#9

Post by 0x0 » Wed, Jun 17, 2015, 11:30 AM UTC

Anyone have any more information about (or even a source for) "Google's Chromium security team was more responsive and removed Keychain integration for Chrome noting that it could likely not be solved at the application level"?

Is this going to happen in an upcoming stable release? What is it being replaced with?

Re: Boffins reveal password-killer 0days for iOS and OS X

#10

Post by lgrebe » Wed, Jun 17, 2015, 11:32 AM UTC

therealmarv wrote: post #3

So Apple was aware of this for 6 months and are doing NOTHING, not even communicating?! How serious do they take security and fixing it (at least within 6 months) ?

FTA: "Apple security officers responded in emails seen by El Reg expressing understanding for the gravity of the attacks and asking for a six month extension and in February requesting an advanced copy of the research paper before it was made public."