Apple pushes iOS 11.2.2 to patch Spectre and Meltdown

[DrMacintosh]

Apple today, pushed out iOS 11.2.2 in an effort to patch the security vulnerabilities in iOS 11.2.2. 

Quote

Apple has released three new security updates aimed at protecting Safari and WebKit from the Spectre attack. The three updates make changes to iOS, macOS, and Safari itself, but in each case, the stated goal is protecting Safari and the underlying browser engine against attacks exploiting the recently published Spectre vulnerability.

Source: https://www.theverge.com/2018/1/8/16863884/meltdown-spectre-apple-security-update-safari-webkit

 

Good to see Apple leading the mobile security space once again. 

[NinJake]

So they patched Safari, not the chip?

[DrMacintosh]

Just now, NinJake said:

So they patched Safari, not the chip?

Same as everyone else since this is a hardware flaw. 

[NinJake]

Just now, DrMacintosh said:

Same as everyone else since this is a hardware flaw. 

So good for them, but not really  "leading the mobile security space once again" when Chrome and Firefox have also already done the same

[CryptoMatt]

Who uses safari? Even if you have an apple device

[DrMacintosh]

5 minutes ago, NinJake said:

"leading the mobile security space once again" when Chrome and Firefox have also already done the same

Chrome and Firefox run WEBkit, so anything they patch is not really theirs. If it's on Android the whole system is still not covered. 

[DrMacintosh]

4 minutes ago, CryptoMatt said:

Who uses safari? Even if you have an apple device

Safari is the default browser for each OS and I prefer it for its Handoff and iCloud features. 

 

Its also way more power and RAM efficient. 

 

I only use Chrome on my Mac for one extension for one game, but otherwise I use Safari. 

[Techstorm970]

1 minute ago, CryptoMatt said:

Who uses safari? Even if you have an apple device

I do.  Safari is good enough for me.  Although, I do use Chrome on PC because Edge and IE are not good enough.

[Droidbot]

not really leading the mobile security space when the asb (android security bulletin) patched this on the 5th (Spectre) and 1st (Meltdown), both of which have been released for pixel/nexus devices alongside updates to Google Play Protect to detect apps exploiting these two vulns.

 

1 minute ago, DrMacintosh said:

Chrome and Firefox run WEBkit, so anything they patch is not really theirs. If it's on Android the whole system is still not covered. 

They run WebKit, but only on iOS.

Mozilla has patched FF for all platforms bar iOS, same for Google with Chrome.

 

 

 

[DrMacintosh]

Just now, Droidbot said:

Mozilla has patched FF for all platforms bar iOS, same for Google with Chrome.

Because they run WEBkit, so Apple is going to patch it for them. 

[CryptoMatt]

8 minutes ago, DrMacintosh said:

Safari is the default browser for each OS and I prefer it for its Handoff and iCloud features. 

 

Its also way more power and RAM efficient. 

 

I only use Chrome on my Mac for one extension for one game, but otherwise I use Safari. 

Safari didn’t support a lot of the things I needed to do in the past so I never use it when we already have good browsers to use. Like some files wouldn’t let download but on chrome it worked. Or it would be like safari can’t open this so I needed chrome 

[Guest]

14 minutes ago, CryptoMatt said:

Who uses safari? Even if you have an apple device

 

Safari is a lot better than Chrome on an Apple Device.

[DrMacintosh]

6 minutes ago, RorzNZ said:

 

Safari is a lot better than Chrome on an Apple Device.

This 

[CryptoMatt]

9 minutes ago, RorzNZ said:

 

Safari is a lot better than Chrome on an Apple Device.

How so? I have zero issues with speed or anything related to chrome. But I only have an apple device because of how simple it is and it’s usally faster than android IMO, but I use zero apps related to apple, I even back up my data on drive and not iCloud. But I also hate apple and bought my phone used so I wasn’t giving apple the money for the phone 

 

maybe if if you use iCloud or other apple devolped apps it will have better support but for what I do safari has not much support  or atleast not when I used it 

[Guest]

2 minutes ago, CryptoMatt said:

How so? I have zero issues with speed or anything related to chrome. But I only have an apple device because of how simple it is and it’s usally faster than android IMO, but I use zero apps related to apple, I even back up my data on drive and not iCloud. But I also hate apple and bought my phone used so I wasn’t giving apple the money for the phone 

 

maybe if if you use iCloud or other apple devolped apps it will have better support but for what I do safari has not much support  or atleast not when I used it 

iCloud makes Safari a lot better. I wouldn't really rely on a mobile brower for much tbh at any rate. If Chrome works for you, then it works for you though

[mr moose]

36 minutes ago, Droidbot said:

not really leading the mobile security space when the asb (android security bulletin) patched this on the 5th (Spectre) and 1st (Meltdown), both of which have been released for pixel/nexus devices alongside updates to Google Play Protect to detect apps exploiting these two vulns.

 

They run WebKit, but only on iOS.

Mozilla has patched FF for all platforms bar iOS, same for Google with Chrome.

 

 

 

When most people say "leading the way"  what they mean is they don't understand the evolution of technology and are just ignorantly attributing everything to one company.

 

No one person/company invented anything really, it's all been the cumulative evolution of previous ideas with new technology.

[captain_to_fire]

41 minutes ago, DrMacintosh said:

Chrome and Firefox run WEBkit, so anything they patch is not really theirs. If it's on Android the whole system is still not covered. 

No they don’t, at least for the desktop and Android versions. Chrome uses a forked version of Webkit and they call it “Blink”, Firefox has their own open source rendering engine named “Gecko”. The only time Firefox and Chrome ise Webkit fully is for their browsers for iOS. 

[DrMacintosh]

23 minutes ago, hey_yo_ said:

The only time Firefox and Chrome ise Webkit fully is for their browsers for iOS. 

Which is the only thing I’m talking about. 

[captain_to_fire]

18 minutes ago, DrMacintosh said:

Which is the only thing I’m talking about. 

But you could’ve indicated it ?

[Cheezdoodlez]

1 hour ago, CryptoMatt said:

Who uses safari? Even if you have an apple device

I use it on my iPhone. I run chrome on everything else but prefer safari on the phone. I tried to switch to chrome but didn't really like it.

 

The deal breaker for me is that tab navigation is on top, not ideal for a person with tiny Linus-hands and a big phone

[79wjd]

4 minutes ago, hey_yo_ said:

But you could’ve indicated it ?

In fairness everything he mentioned was in relation to internet security.

[CryptoMatt]

12 minutes ago, Cheezdoodlez said:

I use it on my iPhone. I run chrome on everything else but prefer safari on the phone. I tried to switch to chrome but didn't really like it.

 

The deal breaker for me is that tab navigation is on top, not ideal for a person with tiny Linus-hands and a big phone

do you know iPhones have a function where you double tap the home button (not press but just lightly tap) and the application (or home screen) will move halfway down the screen so you can press buttons that are at the top easier.

 

if you have the 10 I’m not sure how to do it

 

i don’t know of many people who know about it personally but online everyone seems to know more.

[79wjd]

6 minutes ago, CryptoMatt said:

do you know iPhones have a function where you double tap the home button (not press but just lightly tap) and the application (or home screen) will move halfway down the screen so you can press buttons that are at the top easier.

 

if you have the 10 I’m not sure how to do it

 

i don’t know of many people who know about it personally but online everyone seems to know more.

On the X you drag the home bar down. Reachability is decently known but it's really just a shitty hack imo.

[Matu20]

One more platform safe, good.