“Apple takes security very seriously. IOS and OS X never incorporated the vulnerable software and key Web-based services were not affected,” an Apple spokesperson told Re/code.
Great news.
Apple says iOS and OS X were not affected by “Heartbleed”
“Apple takes security very seriously. IOS and OS X never incorporated the vulnerable software and key Web-based services were not affected,” an Apple spokesperson told Re/code.
Great news.
I’m confused … I thought that the bug was on the server, and I can’t imagine that iOS is ever used as a web server.
However, if an iOS (or OSX) device made a connection to a server with the bug, then the user of that iOS device is vulnerable to the bug, even though the bug is not on iOS itself.
This seems like a misleading statement on Apple’s part. Or am I missing something?
Exactly the same way I understand it.
The title of the article is somewhat misleading. Apple says it’s services were not affected. That is, all the stuff they serve up, like email, iTunes accounts, etc. This isn’t an operating system bug.
I spoke with an Apple rep on their online chat system today. His response (after at first using words like “unlikely”) eventually was “I have been assured by our security team that our services are not at risk to this security threat.”
/braggingrights
?
OpenSSL isn’t only used on servers.