Something just blew up. In Apple’s face. Big time.
Why Apple’s Recent Security Flaw Is So Scary.
On Friday, Apple quietly released iOS 7.0.6, explaining in a brief release note that it fixed a bug in which “an attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS.” That’s the understated version. Another way to put it? Update your iPhoneright now.
Oh, and by the way,OS X has the same issues—except there’s no fix out yet.
In simple terms, someone can intercept traffic between you and the site your accessing, and pull of a “Man in the Middle” attack:
I could make all manner of snarky comments on this, but I won’t.