Apple Inc. SSL/TLS Bug Links to Snowden
By Athena Yenko | February 24, 2014 6:43 PM EST
Apple Inc. SSL/TLS bug could be what U.S. intelligence agents were boasting about as documents leaked by Edward Snowden mentioned about agents saying they can hack any iPhone and that this is a fact that was not exposed in public.
According to researchers who examined versions of Apple's software, Apple Inc. SSL/TLS bug had been present for months and that people who had learned about the flaw chose not to report it, Reuters reported.
It did not help that Apple Inc. was elusive about when or how it discovered the security flaw which affected iOS and Mac OS.
The SSL/TLS bug was so anomalous that security experts were criticising Apple Inc for its failure to do thorough software testing. Experts were theorising that an Apple Inc. engineer might have intentionally created the bug to spy or hack on users.
Some intelligence people meaningfully said that the best of "back doors" were created by "mistake."
Johns Hopkins University cryptography professor Matthew Green told Reuters that Apple Inc. SSL/TLS bug was "as bad as you could imagine."
Mr Green refused to elaborate, "that's all I can say," he said.
The trouble with SSL/TLS Bug was the software's recognition of digital certificates which banking sites, Google's Gmail service, Facebook etc utilise in establishing encrypted connections.
The one single line in the programme and an absent bracket were proofs that certificates, supposedly recognised by the SSL/TLS, cannot be authenticated. As a result, hackers can masquerade as the Web site being surfed by those browsing the internet. Hackers can then acquire all the electronic traffic before a connection to the real site can happen.
Aside from intercepting data, hackers can also interleave malicious web links in real emails, taking full control of the device being hacked.
Hacker can easily gain access to targeted devices simply through connecting to an internet service provider or through unsecured WiFi connections.
Apple Inc refused to comment about the experts' theories.
On the other hand, Adam Langley, a Google engineer who had dealt with similar issues in the past, believed that Apple Inc. had no intentions of creating the flaw.
"I believe that it's just a mistake and I feel very bad for whomever might have slipped," he wrote in a personal blog.
To contact the editor, e-mail:
Most Popular Slideshows
- Flight MH17 Attack: Russians Claim 'Putin A Terrorist,' Memorial at Dutch Embassy Overflows [PHOTOS]
- Typhoon Rammasun Claims 18 Lives in China, Incurs $4.32B Losses (PHOTOS)
- Ellen DeGeneres Caught Cheating with Mutual Friend Before Portia de Rossi’s Rehab – Reports [PHOTOS]
- Malaysia Airlines MH17: Vital Black Boxes Finally Land in Hands of Malaysian Authorities, Rebels Announce Ceasefire (PHOTOS/VIDEOS)
Join the Conversation
- California Fruits Recalled in USA and Canada for Possible Listeria Contamination
- Malaysian Airlines Flight 17: Air Carrier Losing $1.6 Million/Day; Crisis Management Experts Suggest Hiring Risk Expert as CEO
- The IBM and Apple Merger: Will it Spell Trouble to Rival Companies
- CBA, NAB, Westpac in Fixed Rate War Offering Below 5% Interest
- Radio Australia Cuts to Affect Isolated Vanuatu Residents Who Rely on It for Weather Bulletins
- Samsung Galaxy Note 4 Apps Leak Online, Five Fresh Features to Expect from the Android Smartphone
- Moto 360 Price Speculations, Key Features, Strategic Release Date, Design: A Watch That is More Than Just Time
- Windows Phone 8.1 Update Rollout: 20 Nokia Lumia Phones Eligible and 13 New Features to be Added
- Three New Moto G Successors Spotted in FCC Document Dubbed Moto G2, Moto M and More --Reports
- iPad Air 2 Release Date Will Skip IGZO Panel; To Rollout with Super-Slim iPad Mini Air
- Upcoming iPad Mini 3 Could be 30% Thinner and Likely be Called iPad Mini Air; Apple Q3 Results Show 9% Decrease in iPad Sales
- Sony Xperia M2 vs. Moto G – Specifications, Features and Price Showdown