Apple admits its products affected by global security flaw

05 January, 2018, 11:58 | Author: Devin Moran
  • Hardware fixes are by nature much slower and more difficult than software fixes. tcareob72/Thinkstock

APPLE HAS CONFIRMED that all Mac and iOS devices are affected by the Meltdown and Spectre security flaws, that experts say could allow hackers to access sensitive data.

The researchers said on their website that Intel paid a so-called "bug bounty" to them for disclosing the flaws to Intel but did not state a dollar amount.

Meltdown and Spectre are major security flaws that leaves the devices vulnerable to hacking. Meltdown lets hackers bypass the hardware barrier between applications run by users and the computer's memory, potentially letting hackers read a computer's memory. He tells Sydell that the problem is found on millions of computers, as well as smartphones and cloud storage provided by companies such as Google, Amazon Web Services, Apple and Microsoft. It was first discovered by Project Zero in June past year.

Meltdown could have devastating effect for cloud providers as Google researchers were able to demonstrate reading of host memory from a KVM guest OS.

Microsoft said in a statement Thursday that it is not aware of any of these vulnerabilities being used against its customers.

The company has said that it will release a patch to protect its browser, Safari, against Spectre.

The vulnerabilities - which exist at a hardware level - put the onus on system creators such as Apple, Microsoft and Google to release patches at an operating system level to prevent hackers from exploiting the opportunity to steal passwords, credit card numbers and other vital details. Now Apple has also issued a statement on the same saying all Macs and iOS devices are impacted by this security flaw.


Consumers can mitigate the underlying vulnerability by making sure they patch up their operating systems with the latest software upgrades. "Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time".

These vulnerabilities do not result in instant hacks - they first require attackers to first compromise vulnerable devices by the usual methods such as tricking users into running malware or visiting malicious sites.

If your laptop/desktop/server vendor has provided extra chipset firmware updates, you can get them from their official sites, install them, and complete the patch.

It's something no one had realized was an issue for 20-some years.

Google said its Android phones - which make up more than 80% of the global market - were protected if users had the latest security updates.

The Register originally reported the story of the "Kernel memory" leaks and design flaws in Intel processors. There is no evidence malicious hackers have exploited the chip flaws, though researchers said it would be hard for investigators to know for sure. "Exploits for these bugs will be added to hacker's standard toolkits", said Guido.

Recommended:

  • Parties hail NRC first draft publication

    Parties hail NRC first draft publication

    National Register of Citizens (NRC), 1951, is a record of names of Indian citizens being updated until midnight of March 24, 1971. Assam has been driven into a conflict between the permanent residence and those who have migrated from Bangladesh.
    Hafiz Saeed attacks India after United States  suspends military aid to Pakistan

    Hafiz Saeed attacks India after United States suspends military aid to Pakistan

    Hamdullah Mohib welcomed Trump's tweet . "They give safe havens to the terrorists we hunt in Afghanistan, with little help". After the tweet , Pakistan's Foreign Minister Khawaja Asif said: "We will respond to President Trump's tweet shortly".
    Cowboys beat playoff-bound Eagles 6-0

    Cowboys beat playoff-bound Eagles 6-0

    With that, the Cowboys were then able to run 5:23 off the clock, Bailey getting one more try at a field goal with 16 seconds left. Cowboys quarterback Dak Prescott and wide receiver Brice Butler connected for the game's only touchdown in the fourth quarter.
  • Samsung Galaxy On Nxt 16GB launched in India, priced at Rs. 9999

    Samsung Galaxy On Nxt 16GB launched in India, priced at Rs. 9999

    Under its hood, there operates an Exynos 7885 SoC paired with 4GB RAM and two storage configurations - 32GB and 64GB. The device will follow Samsung's popular Galaxy S8 and Galaxy S8 Plus, which were unveiled in March of a year ago .
    Computer glitch temporarily halts US Customs operations

    Computer glitch temporarily halts US Customs operations

    Photos posted on social networks by stranded passengers showed long lines at New York's JFK and Atlanta's Hartsfield-Jackson. Some travelers arriving or departing San Diego International Airport may have been delayed New Year's Day due to a U.S.
    Wind Chill Advisory Issued For Southeast Michigan Tonight

    Wind Chill Advisory Issued For Southeast Michigan Tonight

    PRECAUTIONARY/PREPAREDNESS ACTIONS.A Wind Chill Advisory means that cold air and the wind will combine to create low wind chills. Wind chills will remain around -15 to -30 throughout the afternoon, and the Wind Chill Warning will last into Tuesday morning.
  • Justin Timberlake's New Video

    Justin Timberlake's New Video "Filthy" Is An Electro-Funk Beauty

    The new track, titled Filthy , is a mix of synth-funk, some elements of rock, and of course JT's famous pop-fuelled self. Mark Romanek directed the video.
    Helwan: Gunman launches deadly attack on Marmina Church

    Helwan: Gunman launches deadly attack on Marmina Church

    At least nine people were killed, an official said, in the latest violence targeting Egypt's Christian minority. It also said there was a separate attack on a store in the same neighborhood of Helwan that killed two Copts.
    LG Reveals Smart ThinQ Speaker with Google Assistant Before CES 2018

    LG Reveals Smart ThinQ Speaker with Google Assistant Before CES 2018

    LG is confident that the amount of technology it has introduced into its audio products will definitely impress audiences. The ThinQ Speaker is called by LG as its "first premium smart AI audio product" that doubles up as a nifty smart home hub.
  • PlayerUnknown's Battlegrounds Developers Want to Bring Game to Every Platform

    PlayerUnknown's Battlegrounds Developers Want to Bring Game to Every Platform

    In PUBG , players are on a mission of survival as they parachute onto an island and scavenge around for equipment and weapons. This means that the PS4 version of this game will have to be fully completed before it can be launched on the console.
    Mega Millions jackpot rises to $343 million

    Mega Millions jackpot rises to $343 million

    With no lucky victor in Friday night's drawing, the Mega Millions jackpot swelled to $361 million for Tuesday's drawing. The $343 million prize would be the eighth-highest won, according to the Mega Millions website .
    Colorado deputy sheriff killed in domestic dispute call, suspect shot

    Colorado deputy sheriff killed in domestic dispute call, suspect shot

    An hour later, the sheriff's office tweeted that "multiple deputies" were down but couldn't update their conditions. The landscaped apartment complex is 16 miles south of Denver. "All of them were shot very, very quickly", he said.


Popular

Chelsea on the brink of signing £35 million rated Premier League star
The 24-year old remained a wanted man for Chelsea and was under Conte's radar for a couple of seasons. Barkley turned down a move to Chelsea on transfer deadline day in August.

January Nintendo Direct could see more than 16 games revealed
This is good news for people bored of gaming gems like Mario Odyssey and The Legend of Zelda: Breath of the Wild . This time, however, Nintendo has the advantage of a solid base of gamers that will be looking for new content.

NBC names Hoda Kotb as Lauer replacement on 'Today'
In addition, she apparently has "quickly hit the ground running", according to NBC News Chairman Andrew Lack in a statement. During Tuesday's early morning broadcast, Guthrie once again expressed her enthusiasm for working with Kotb .

AMBER Alert Issued For Girls Missing From Texas
Terry Allen Miles, 44, according to police, may have the children, but it's unclear what his relationship is to the girls. Tonya Bates, the mother of the two missing girls, was found dead on New Year's Eve, according to KVUE-TV.

Protester kills policeman as Iran bloodshed worsens
The protests have become the biggest test for the regime since demonstrations following the disputed 2009 presidential election. At least 36 people were killed in 2009, according to an official toll, while the opposition says 72 died.

Dom Capers, Packers' defensive boss since '09, fired
Green Bay and Washington finished tied for the 13 pick based on record, however a tie-breaker gave the Redskins the 13 selection. Capers had been the defensive coordinator with the Packers since 2009, helping the team win a Super Bowl during the 2010 season.

Detroit Lions maul Green Bay Packers in season finale, 35-11
The Packers finally got on the scoreboard again on Hundley's 17-yard, fourth-down pass to Randall Cobb with 11:27 left. Tate threw a two-point conversion pass to Stafford after Adbullah took the snap and pitched it Tate on the trick play.

Did the Patriots just start Thermometergate with the Jets?
Then just before halftime, NY cornerback Juston Burris was flagged for defensive holding on a Patriots' third-down pass attempt. Linebacker James Harrison, just signed after being released by the Patriots, had two sacks in his Patriots debut.

Four jawans martyred as Jaish militants storm CRPF camp in J&K's Pulwana
With the daybreak, more troops were called in to neutralise the terrorists. "Fidayeen managed to enter Lethpora camp at 2.10 AM". The terrorists first lobbed grenades and then began indiscriminate firing and entered the training centre in Awantipora.

Deputies: Man rigs door trying to electrocute pregnant wife
Another set of wires with clamps from a vehicle battery charger also was attached, according to arrest documents. Some sticky notes, love letters and a photo album opened to a picture of the Wilsons together were on the bed.