News for hackers. Stuff that matters.
Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by CervezaPorFavor on Sunday February 23, 2014 @12:35AM (#7285048)
> it requires a specific (common, but not universal) set of circumstances to escalate it to code execution.

Man in the middle attack does not require code execution because the data is already available.

In a sense, this bug is like having part of a keyboard sniffer already installed for you.

There are no comments on this comment yet.