[for-q-clinton]

If you're using any Apple product and think it's secure you're only fooling yourself. Plus they got many of the dumb users on their products so I suspect many of their users are completely owned.

Better switch to a more secure OS like Linux or Windows. And for phones Windows Phone is the most secure right now.

[for-q-clinton]

Please ping both your aliases. Shadow I know you don’t like pinging apple stuff as swordmaker does that for his group, but this is pretty big and the tech community needs to be aware of it.

[TomGuy]

Look out below!

Mac users will be jumping out of the windows.

Macs NEVER have a problem with viruses, etc. [/s]

[RayChuang88]

The fixes are iOS 7.0.6 (iPhone 4 to 5S, iPad 2 and later) and iOS 6.1.6 (iPhone 3GS and 4th generation iPod touch).

[Red in Blue PA]

Fanboys all around the world are in stunned disbelief.

[unixfox]

OSX is a derivative of Unix. The truth of the matter is, ANY operating system is vulnerable. It’s just a matter of what degree.

[cynwoody]

Here it is:

static OSStatus
SSLVerifySignedServerKeyExchange(SSLContext *ctx, bool isRsa, SSLBuffer signedParams,
                                 uint8_t *signature, UInt16 signatureLen)
{
	OSStatus        err;
	...

	if ((err = SSLHashSHA1.update(&hashCtx, &serverRandom)) != 0)
		goto fail;
	if ((err = SSLHashSHA1.update(&hashCtx, &signedParams)) != 0)
		goto fail;
		goto fail;
	if ((err = SSLHashSHA1.final(&hashCtx, &hashOut)) != 0)
		goto fail;
	...

fail:
	SSLFreeBuffer(&signedHashes);
	SSLFreeBuffer(&hashCtx);
	return err;
}

Source

Note that going to fail doesn't actually signal failure unless err is non-zero, and that the third goto is unconditional, thus keeping the third if-test from ever running.

According to the source link, there is possibly a compiler option that, had it been used, would have raised a warning about the unreachable code.

[aMorePerfectUnion]

“If you’re using any Apple product and think it’s secure you’re only fooling yourself. Plus they got many of the dumb users on their products so I suspect many of their users are completely owned.”

Since MS OS is used by such a majority of computer users, I imagine “dumb users” are concentrated in Windows.

“Better switch to a more secure OS like ......Windows.”

Oh my gosh!!! I needed a laugh!!

[dennisw]

AAPL SUX I will never buy an apple product. Screw those commies. I use Windows 7 and 8. I use a cell phone but any smart phone/tablet will be an android

[ShadowAce]