Apple Blocks Certificates That Could Help Attackers Fake Websites
Apple has blocked compromised security certificates on its devices that could help attackers impersonate websites, BleepingComputer reports.
The certificates were issued by certificate authority eMudhra. According to Mozilla's investigation, their private keys were all numbers below 256, making them almost instantly recoverable. Attackers could use the affected website certificate keys to create fraudulent certificates that vulnerable software would trust.
Apple introduced the blocks on October 19, according to an advisory from Mozilla cryptography engineer Dennis Jackson. These protections stop software using Apple's system checks from trusting the compromised certificates.
Jackson says Safari and other major browsers had additional certificate checks that would have prevented attacks through this route. Whether attackers exploited other software remains unknown.
Apple has already distributed blocks for the compromised certificates. Mac users who use the affected command-line tools can find tests and mitigation instructions on Jackson's website.
Popular Stories
Apple today sent out invites for an experience in Los Angeles on Wednesday, October 28, and the "Pro and tell" tagline on the invitation likely means that the rumored MacBook models with touch-enabled OLED displays will stick with MacBook Pro branding instead of the once-rumored "MacBook Ultra" name.
The long-rumored "iPhone Ultra" ended up being named iPhone Duo, so speculation that Apple...
With just three days to go until the iPhone Duo is released, Apple is getting ready for the launch. Behind the scenes, the App Store now has screenshots of Apple's built-in apps running on the Duo. We've seen some apps in marketing materials, but images of the ones we haven't seen give us an idea of what it will be like using the iPhone Duo day to day.
Many apps are shown in landscape...
Apple's Greg Joswiak today hinted at new product announcements coming next week, sharing a social media post that says "Can't wait to pro and tell next week."
Rumors suggest Apple is planning to debut the new MacBook Pro with an OLED touchscreen display, an M6 entry-level MacBook Pro, an M6 iMac, an iPad mini with an OLED display.
Can't wait to pro and tell next week....
