| Update now: Macs and iPhones have a Stagefright-style bug! | |
|
|
Author | Message |
---|
richard09
Posts : 4227 Join date : 2013-01-16
| Subject: Update now: Macs and iPhones have a Stagefright-style bug! Wed Jul 20, 2016 12:43 pm | |
| Update now: Macs and iPhones have a Stagefright-style bug! - Quote :
- According to security researcher Tyler Bohan of Cisco Talos, the CVE-2106-4631 bug occurs in the handling of TIFF images; the faulty code affects both OS X and iOS; and the bug has been around for ages.
The bottom line, therefore, is that your iDevice or Mac is almost certainly vulnerable if you haven’t installed the very latest update yet. |
|
| |
_Howard Admin
Posts : 8734 Join date : 2013-01-16 Age : 79 Location : California
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Wed Jul 20, 2016 1:19 pm | |
| Who would send a .tiff file with a text message? The files are huge. I have a jpeg file that is 16 megabytes and a corresponding .tiff version which is 157 megabytes.
In any case, few phones are affected by this bug, because the standard camera file is jpeg.
But thanks for the tip.
|
|
| |
richard09
Posts : 4227 Join date : 2013-01-16
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 2:40 pm | |
| |
|
| |
NoCoPilot
Posts : 20160 Join date : 2013-01-16 Age : 69 Location : Seattle
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 3:13 pm | |
| - Apple wrote:
- No updates available
That's for normal OSX. The iOS has an update, which I am downloading now |
|
| |
_Howard Admin
Posts : 8734 Join date : 2013-01-16 Age : 79 Location : California
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 3:58 pm | |
| |
|
| |
NoCoPilot
Posts : 20160 Join date : 2013-01-16 Age : 69 Location : Seattle
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 4:43 pm | |
| - Quote :
- According to security researcher Tyler Bohan of Cisco Talos: the CVE-2106-4631 bug occurs in the handling of TIFF images; the faulty code affects both OS X and iOS; and the bug has been around for ages.
Meh. |
|
| |
_Howard Admin
Posts : 8734 Join date : 2013-01-16 Age : 79 Location : California
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 5:09 pm | |
| I believe that the article to which Richard posted the link is not the same as the tiff problem posted earlier.
"Look, there's an attack on Apple products." "meh."
"Look, there's an attack on Windows computers." "Just proves than only an idiot would own a Windows machine."
|
|
| |
NoCoPilot
Posts : 20160 Join date : 2013-01-16 Age : 69 Location : Seattle
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 6:01 pm | |
| Windows gets more attacks than Apple, this you cannot dispute. Whether it's due to the lower market share, the closed software development environment, marginally more secure core software or something else doesn't matter.
The fact of the matter stands. |
|
| |
NoCoPilot
Posts : 20160 Join date : 2013-01-16 Age : 69 Location : Seattle
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 6:05 pm | |
| - _Howard wrote:
- I believe that the article to which Richard posted the link is not the same as the tiff problem posted earlier.
Follow the link Richard provided (and I quoted). It looks to me like they are. |
|
| |
_Howard Admin
Posts : 8734 Join date : 2013-01-16 Age : 79 Location : California
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 6:19 pm | |
| |
|
| |
NoCoPilot
Posts : 20160 Join date : 2013-01-16 Age : 69 Location : Seattle
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 6:31 pm | |
| Sorry I must have clicked the wrong link. |
|
| |
_Howard Admin
Posts : 8734 Join date : 2013-01-16 Age : 79 Location : California
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 6:36 pm | |
| - NoCoPilot wrote:
- Windows gets more attacks than Apple, this you cannot dispute. Whether it's due to the lower market share, the closed software development environment, marginally more secure core software or something else doesn't matter.
The fact of the matter stands. Yes, Windows gets more attacks, and the market share has been widely considered to be the reason why. Some time back, I posted a link to an article in which thirty+ computer security people discussed just this issue. Many - maybe most - of them were Apple users. But the conclusion was that market share is why Microsoft boxes have the problem. It was stated by many, maybe all, of the Apple users in the survey that the Apple boxes were not more intrinsically secure than the Windows machines. In fact, it was mentioned more than once that the Safari browser was incredibly vulnerable; much more so than Internet Explorer or Firefox. Consider the current situation of the assholes calling and claiming to be from Windows Technical Support. The damage they do to the computer of someone who falls for their bullshit has nothing to do with the security problems of Windows. Their scam could just as easily be perpetrated on the owners of Apple computers. The computer itself is not the problem, it is the naïveté of the users. Perhaps Apple users are less likely to be fooled. But in any case, it is not correct to demean the users of Windows machines and place the blame of the actions of the crooks on Microsoft. We are seeing more attacks on IOS devices, because there are so damn many of them. There is reason to believe that if the numbers were changed, and Apple had ninety percent of the installed computer base, then the attacks would be against Apple machines and Windows users would be relatively safe. |
|
| |
NoCoPilot
Posts : 20160 Join date : 2013-01-16 Age : 69 Location : Seattle
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 6:53 pm | |
| If you're referring to the article on Apple-versus-Windows security vulnerability you posted a couple weeks ago, the experts awarded Apple the edge (narrow though it be) on every single parameter they tested. Yes, Apples can be vulnerable. Stupid users cause stupid vulnerabilities regardless of the platform. However, Firefox running NoScript seems to be pretty bulletproof. At least I've been visiting Russian hacker sites and zoophilia porn for years without ever catching anything |
|
| |
_Howard Admin
Posts : 8734 Join date : 2013-01-16 Age : 79 Location : California
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! Fri Aug 26, 2016 7:03 pm | |
| - NoCoPilot wrote:
- If you're referring to the article on Apple-versus-Windows security vulnerability you posted a couple weeks ago, the experts awarded Apple the edge (narrow though it be) on every single parameter they tested.
Yes, and that edge was in every case based upon the fact that Apples are not attacked in great numbers. |
|
| |
Sponsored content
| Subject: Re: Update now: Macs and iPhones have a Stagefright-style bug! | |
| |
|
| |
| Update now: Macs and iPhones have a Stagefright-style bug! | |
|