Hacker News new | ask | show | jobs
by Touche 4445 days ago
Article is not very informative. If they don't use OpenSSL what do they use?
3 comments
kalleboo 4445 days ago
SecureTransport https://developer.apple.com/library/mac/documentation/securi...

Remember "Goto fail?"

link
ytch 4445 days ago
Yes, they are developing their own SSL library, so "Goto fail" didn't affect OpenSSL, too.
link
super_mario 4445 days ago
They do use OpenSSL, just 0.9.8y version which is not affected.
link
Tloewald 4445 days ago
And it's deprecated. It's there for older applications that depend on it.
link
NamTaf 4445 days ago
My jailbroken iOS 7.0.6 had OpenSSL 0.9.8y on it. I don't know if this is an addition of the jailbreak but it wouldn't surprise me if it's baked in - after all, iOS and OSX contains BSD roots via Darwin and BSD 9.x wasn't vulnerable for the same 'too old version' reasons.
link
jvreeland 4445 days ago
Your iPhone having OpenSSL is probably the jailbreak, however all OSX computers ship with 0.9.8 for legacy reasons. It's not used by any other apple software to my knowledge.
link