The “Goto Fail” Bug, as it’s commonly know, has been found to be present on Mac systems running OS X Mavericks 10.9.1 when using the Safari Browser.
In this Episode: How To Check If Your Mac is Vulnerable to the “Goto Fail” Bug
*** An UPDATE Has Been Release! - Download OS X 10.9.2 Update ASAP from the Mac App Store - Then Check Using Safari If the Update Fixes The 'Goto Fail' Bug ***
Personally Tested Using Safari on OS X 10.9.2 Update and got a Result of: Safe...for Browser and other Applications on the Mac. Which means everything is a O.K!. SSL Protocol working.
Briefly:
On Friday February 21st, Apple Inc. released a security update: iOS 7.0.6 for all iOS devices.
In a nut shell, the security fix addresses a vulnerability that existed when accessing secure sites through the SSL protocol, like banks or any secure sites, where you usually see a padlock symbol next to https, indicating that any information sent to or from the https website is encrypted and secure, apparently this was not working…hence iOS 7.0.6 was released to fix this vulnerability.
If you have not already done so…Update your iDevices ASAP!
Furthermore; the “goto fail” Bug, as it’s commonly know, has been found to be present on Mac systems
running OS X Mavericks 10.9.1 when using the Safari Browser.
In fact, any Apps using the SSL-encrypted connection is also vulnerable…namely: FaceTime, Mail, iBooks,
iMessage, plus and third party programs such as Twitter and more using Apple’s code.
Google Chrome and Mozilla Browsers are not vulnerable because they don’t use the same SSL protocol,
without getting too technical, they both use the NSS protocol.
According to-The Register: http://www.theregister.co.uk/2014/02/23/apple_mac_os_x_10_9_ssl_fix/
Apple has admitted a bug in Mac OS X Mavericks 10.9.1 that allows hackers to intercept and decrypt SSL-encrypted connections and has vowed to release a fix ‘very soon.’
To check if your Mac is vulnerable to the “goto fail” bug, someone’s set up a website called gotofail.com
that allows you to check your computers vulnerability.
Link: https://gotofail.com
Using Safari browser, enter the following link: gotofail.com and that’s all there is to it, your browser will indicate if it’s vulnerable or not, this is the message I received:
YOUR BROWSER IS VULNERABLE, PATCH AS SOON AS POSSIBLE!
When using Google Chrome, this is the message received: Warning!
When using Safari browser on my iPad and after applying the security fix iOS 7.0.6, this is the message I
received: Safe.
Basically; my advice is that, don’t use your Mac in an unsecured Wi-Fi location, especially if doing any
financial transactions until Apple Inc. Releases a fix…let hope it very very soon.
As of today, Tuesday February 25th, 2014 an update is still not available from the Mac App Store.
Thanks for watching and thumbs-up if you liked this video, and please, don't forget to subscribe to be notified of the next episode.
Thanks and Peace.

No comments :
Post a Comment