=============================================================
Apple and Google Plan Fixes for 'Freak' Security Bug
Apple
and Google said on Tuesday that they have developed fixes for the newly
uncovered "Freak" security flaw affecting mobile devices and Mac
computers. The vulnerability in Web encryption technology could enable
attackers to spy on communications of users of Apple's Safari browser
and Google's Android browser, according to researchers who uncovered the
flaw. Apple spokesman Ryan James said the computer had developed a
software update to remediate the vulnerability, which would be pushed
out next week. Google spokeswoman Liz Markman said the company had also
developed a patch, which it has provided to partners. She declined to
say when users could expect to receive those upgrades. Google typically
does not directly push out Android software updates. Instead they are
handled by device makers and mobile carriers.
The Washington Post reported
that the bug left users of Apple and Google devices vulnerable to
cyberattack when visiting hundreds of thousands of websites. A group of
nine researchers discovered that they could force Web browsers to use a
form of encryption that was intentionally weakened to comply with U.S.
government regulations that ban American companies from exporting the
strongest encryption standards, according to the paper. Once they caused
the site to use the weaker export encryption standard, they were then
able to break the encryption within a few hours. That could allow
hackers to steal data and potentially launch attacks on the sites
themselves by taking over elements on a page, the newspaper reported.
The group of researchers dubbed the flaw Freak, for "Factoring
RSA-EXPORT Keys," according to a website where they described the vulnerability.
**Important note** - contact our sister company for very powerful solutions for IP management (IPv4 and IPv6, security, firewall and APT solutions:
www.tabularosa.net
In addition to this blog, Netiquette IQ has a website with great assets which are being added to on a regular basis. I have authored the premiere book on Netiquette, “Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". My new book, “You’re Hired! Super Charge Your Email Skills in 60 Minutes. . . And Get That Job!” will be published soon follow by a trilogy of books on Netiquette for young people. You can view my profile, reviews of the book and content excerpts at:
www.amazon.com/author/paulbabicki
If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio Additionally, I provide content for an online newsletter via paper.li. I have also established Netiquette discussion groups with Linkedin and Yahoo. I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. Further, I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and have been a contributor to numerous blogs and publications.
Lastly, I
am the founder and president of Tabula
Rosa Systems, a company that provides “best of breed” products for network,
security and system management and services. Tabula Rosa has a new blog and Twitter site which offers great IT
product information for virtually anyone.
==============================================
No comments:
Post a Comment