Behind iPhone's Critical Security Bug, a Single Bad ‘Goto’
Like everything else on the iPhone, the critical crypto flaw announced in iOS 7 yesterday turns out to be a study in simplicity and elegant design: a single spurious “goto” in one part of Apple's authentication code that accidentally bypasses the rest of it.
Related Coverage
- Apple releases iOS 7.0.6 and 6.1.6 updates with SSL/TLS security fix, OS X still vulnerable The Register · Chris Williams
- ImperialViolet None
- MacRumors None
- Daring Fireball None
- iMore None
- Threatpost None
- Securosis Highlights None
- 9to5Mac None
- Engadget None
- Nelson's Weblog None
- Geeky Gadgets None
- MACé" blog None
- The Next Web None
- ImperialViolet ImperialViolet · Adam Langley
- MacRumors MacRumors · Juli Clover
- Daring Fireball Daring Fireball · John Gruber
- iMore iMore · Nick Arnott
- Threatpost Threatpost · Dennis Fisher
- Securosis Highlights Securosis Highlights · Rich
- 9to5Mac 9to5Mac · Jordan Kahn
- Engadget Engadget · Sean Buckley
- Nelson's Weblog Nelson's Weblog · Nelson Minar
- Geeky Gadgets Geeky Gadgets · Hammad Saleem
- MACé" blog MACé" blog · Danbo
- The Next Web The Next Web · Josh Ong
- MacRumors None
- Apple None
- Reuters None
- VentureBeat None
- SecurityWeek None
- 9to5Mac None
- ZDNet None
- AppleInsider None
- TechnoBuffalo None
- MobileSyrup.com None
- Gotta Be Mobile None
- Apple Apple
- Reuters Reuters · Joseph Menn
- VentureBeat VentureBeat · Dylan Tweney
- SecurityWeek SecurityWeek · Mike Lennon
- ZDNet ZDNet · Zack Whittaker
- AppleInsider AppleInsider
- TechnoBuffalo TechnoBuffalo · Brandon Russell
- MobileSyrup.com MobileSyrup.com · Daniel Bader
- Gotta Be Mobile Gotta Be Mobile · Josh Smith