Just under a week after researchers uncovered a security flaw referred to as "FREAK" (Factoring Attack on RSA-EXPORT Keys) that left many devices vulnerable to hacking attempts, Apple has issued fixes for all of its platforms.
The fix is available in Apple TV 7.1 for Apple TV 3rd generation and later, iOS 8.2 for iPhone 4s and later, iPod touch 5th generation and later and iPad 2 and later. It's also available for Macs with OS X Mountain Lion 10.8.5, Mavericks 10.9.5 and Yosemite 10.10.2.
The vulnerability had stemmed from a former U.S. government policy that prevented companies from exporting strong encryption, instead requiring them to create weak "export-grade" products to ship to its customers outside of the United States. Though the policy was lifted more than a decade ago, the weaker encryption continued to be used by software companies.
Apple's fix addresses the issue by removing support for those weak "export grade" products, also known as RSA keys.
The updates for iOS 8.2, Apple TV 7.1 and Mac OS X Mountain Lion, Mavericks and Yosemite are available now.
Top Rated Comments
There are many users still on the (actively being sold) iPhone 3S and 4. They can't upgrade and are vulnerable now. Check?
Since Joni Ive has been more available to the press and allowed himself to be interviewed, at length.
Since Apple finally "figured out" how to make a larger iPhone correctly, even though everyone else did so years ago.
Since that time when Apple released an open source sdk to benefit medical research towards endemic diseases.
In short, because times change. Apple is changing. So put on your seatbelt, because Apple is in four wheel drive, baby!
There are many users still on the (actively being sold) iPhone 3S and 4. They can't upgrade and are vulnerable now. Check?
Where are those phones being actively sold by Apple?
In The Netherlands, at Albert Heijn (big supermarket and mobile network) as 'refurbished new'. Probably not by Apple themselves, but their not stopping it either.
At Telfort, another dutch mobile network, https://shop.telfort.nl/telefoons/Apple/Apple-iPhone-4-8GB-black-Apple-Certified-Preown.html? (certified by Apple, according to this big operator; and have fun: it's promoted here on the ad-space on macrumours if you once visited that website)
And at a lot of other places
http://tweakers.net/pricewatch/293177/apple-iphone-4-8gb-zwart.html.
As you can see, it's still actively being sold and also bought. Having it not being officially supported makes it become more like how Androids are not up-to-date.
Is there a later generation model I don't know about????