News for hackers. Stuff that matters.

A comment on On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Addition’ to NSA’s PRISM. Parent comment

Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by handsomeransoms on Saturday February 22, 2014 @08:10PM (#7284497)
I think he's referring to app updates, not iOS updates. Also, desktop Mac OS X.
[ Parent | on HN ]
Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by ben1040 on Saturday February 22, 2014 @08:20PM (#7284526)
App installs and updates are still subject to code signing, and unless you jailbroke the device by some other means, any code that would be able to mess with the OS' public keys used to to authenticate the signatures would have to be signed itself and presumably would have to come in the form of a signed OS update.
[ Parent | on HN ]
Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by sneak on Sunday February 23, 2014 @01:35AM (#7285150)
Sparkle Framework.
[ Parent | on HN ]
Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by lstamour on Saturday February 22, 2014 @08:53PM (#7284592)
Though ... if anywhere uses Safari on a regular basis and thus trusts their SSL to it, that would be Apple, yes? ;-)
[ Parent | on HN ]