Heartbleed and iOS

By the way, in the second StackExchange link it says Apple has never supplied OpenSSL with iOS. It makes me wonder if the OpenSSL version you see with Pythonista is supplied by that program and not the OS. If that is true, then the vulnerability could be dependent on the app you are using.

PacBlue wrote:

http://security.stackexchange.com/questions/55249/what-clients-are-proven-to-be- vulnerable-to-heartbleed

http://security.stackexchange.com/questions/55119/does-the-heartbleed-vulnerabil ity-affect-clients-as-severely

PacBlue wrote:

By the way, in the second StackExchange link it says Apple has never supplied OpenSSL with iOS. It makes me wonder if the OpenSSL version you see with Pythonista is supplied by that program and not the OS. If that is true, then the vulnerability could be dependent on the app you are using

Absolutely. It is also worth noting a couple of other things:

• IIS is not effected (never was. Occasionally MS gets something right, even by accident)
• On iOs devices, any intrusion would be limited to pretty much the app in question.
• Client side exploitation of this is a bit more difficult to execute than the articles describe.

While this is by no means a trivial issue, I think (thanks to the tech and popular media and thier "Chicken Little" response) it is being blown a bit out of proportion.

The direct link from Apple (scroll down to section on OpenSSL):

https://developer.apple.com/library/ios/documentation/Security/Conceptual/crypto services/GeneralPurposeCrypto/GeneralPurposeCrypto.html

.

So, as new Mac user and as a person that really doesn't understand all of these words that you are all typing....am I safe with my iMac from this whole Heartbleed thing?

I also have a windows netbook that I don't really use anymore but my kids do for homework, etc....do I need to go ahead and change passwords on that one?

Thanks in advance for your dumbed-down answer 😉

JaynaMc wrote:

So, as new Mac user and as a person that really doesn't understand all of these words that you are all typing....am I safe with my iMac from this whole Heartbleed thing?

No, you are not, but there won't be any patches for either computer to help with this.

Stay off of all sites that require a secure SSL login (https://) where you enter sensitive information, including your userid and password. Wait to be notified by the site that it is now safe and only then change your password.