Stories
Slash Boxes
Comments

SoylentNews is people

posted by LaminatorX on Sunday February 23 2014, @10:00PM   Printer-friendly
from the damned-if-you-do-damned-if-you-don't dept.

l3g0la5 writes:

"Apple released iOS 7.0.6 to patch a vulnerability which, if unpatched, could allow attackers to capture or modify data in sessions protected by SSL/TLS. However, quite a few users have reported that the upgrade didn't go as planned and their iDevices have been bricked after the update or during the update process. Users have flocked to Twitter as well as Apple support forums voicing their concerns and frustrations as quite a few users have tried updating their iOS 7 devices while on the move and once bricked, their iPhone, iPad or iPod Touch requires a connection to iTunes to restart."

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Insightful) by mrbluze on Sunday February 23 2014, @10:06PM

    by mrbluze (49) on Sunday February 23 2014, @10:06PM (#5334) Journal

    Just goes to show, Apple shouldn't boast that their stuff "just works" but is prone to all the same faults of any other software product.

    --
    Do it yourself, 'cause no one else will do it yourself.
    • (Score: 5, Funny) by Ethanol-fueled on Sunday February 23 2014, @10:41PM

      by Ethanol-fueled (2792) on Sunday February 23 2014, @10:41PM (#5345) Homepage

      It's really a security feature to prevent terrorists from getting your data. Or perhaps you were holding the phone the wrong way during upgrade.

      • (Score: 1, Funny) by Anonymous Coward on Sunday February 23 2014, @11:46PM

        by Anonymous Coward on Sunday February 23 2014, @11:46PM (#5378)

        I rang up Applecare, and the nice man on the line said I could use my iPhone as a paperweight while I wait for my son to drive over from Kansas and bring me some tunes to listen to. I'm so happy!

    • (Score: 1, Insightful) by Anonymous Coward on Sunday February 23 2014, @10:55PM

      by Anonymous Coward on Sunday February 23 2014, @10:55PM (#5352)

      Compared to random (fake antivirus) APK drive bys - I'd take iOS any day.

      • (Score: 3, Funny) by Marand on Monday February 24 2014, @07:39AM

        by Marand (1081) on Monday February 24 2014, @07:39AM (#5654) Journal

        Compared to random (fake antivirus) APK drive bys - I'd take iOS any day.

        I'd rather have an apk drive by, personally; all it would do is edit my hosts file, and it's kind of a mess anyway right now.

        • (Score: 3) by dilbert on Monday February 24 2014, @02:01PM

          by dilbert (444) on Monday February 24 2014, @02:01PM (#5803)
          My hosts file on cyanogen currently has 35124 lines, fewer than 40 of which are comments.
    • (Score: 5, Informative) by mrbluze on Sunday February 23 2014, @11:48PM

      by mrbluze (49) on Sunday February 23 2014, @11:48PM (#5380) Journal

      This bug applies to OSX also. [forbes.com] Also to iMessage, Factime, Mail, Twitter...

      --
      Do it yourself, 'cause no one else will do it yourself.
      • (Score: 1) by captain normal on Monday February 24 2014, @07:11AM

        by captain normal (2205) on Monday February 24 2014, @07:11AM (#5635)

        "Apple’s newly discovered security flaw, dubbed “gotofail†by the security community due to a single improperly used “goto†command in Apple’s code that triggered it..." From the Forbes article.

        Why...oh why do I think "goto" = "gotosee" (goatse)...?

        --
        Everyone is entitled to his own opinion, but not to his own facts"- --Daniel Patrick Moynihan--
  • (Score: 5, Insightful) by francois.barbier on Sunday February 23 2014, @10:15PM

    by francois.barbier (651) on Sunday February 23 2014, @10:15PM (#5336)

    ... their iPhone, iPad or iPod Touch requires a connection to iTunes to restart

    Doesn't seem bricked to me.

    • (Score: 2, Interesting) by denmarkw00t on Sunday February 23 2014, @10:48PM

      by denmarkw00t (2877) on Sunday February 23 2014, @10:48PM (#5348)

      Sounds about the same to me - sensationalist headlines abound, even Soylent News...

      buck feta

      --
      buck feta
      • (Score: 1) by mrbluze on Sunday February 23 2014, @10:58PM

        by mrbluze (49) on Sunday February 23 2014, @10:58PM (#5353) Journal

        On android that would be soft-bricked, so it's still bricked.

        --
        Do it yourself, 'cause no one else will do it yourself.
        • (Score: 5, Insightful) by denmarkw00t on Sunday February 23 2014, @11:12PM

          by denmarkw00t (2877) on Sunday February 23 2014, @11:12PM (#5358)

          "soft-bricked" isn't really bricked though; I don't think it deserves qualifiers like "soft" or "Bricked Lite" - it's bricked when the device is officially no more usable than a common brick, in a wall.

          --
          buck feta
          • (Score: 3, Insightful) by mrbluze on Sunday February 23 2014, @11:18PM

            by mrbluze (49) on Sunday February 23 2014, @11:18PM (#5360) Journal

            It's bad enough. Quite a few people would consider it as good as useless and would take their phones back to the shop asking for a replacement, maybe not you, but the average consumer.

            --
            Do it yourself, 'cause no one else will do it yourself.
            • (Score: 1) by denmarkw00t on Sunday February 23 2014, @11:34PM

              by denmarkw00t (2877) on Sunday February 23 2014, @11:34PM (#5370)

              Maybe. I'm not sure what comes with Android phones these days, but my wife's old Xperia came with some Sony software that prominently displayed options to repair a "bricked" phone. And, given that this does affect a wide swath of users, many would probably consider it bricked. Of course, we here on...SN? What's the "/." equiv here????? I imagine most of the audience here will not take kindly to "bricked" being used to describe a phone that's a few clicks away from being usable again.

              --
              buck feta
              • (Score: 3, Informative) by denmarkw00t on Sunday February 23 2014, @11:43PM

                by denmarkw00t (2877) on Sunday February 23 2014, @11:43PM (#5376)

                Oh hay, from TFA (and probably should've been in the summary tbh):

                Some of the users were able to enter recovery mode and then after a factory reset managed to restore their last backup to get their iDevice working, but quite a few were not lucky.

                So, SOME could restore, others were genuinely bricked (it seems, the language still isn't clear).

                --
                buck feta
            • (Score: 4, Insightful) by dmc on Sunday February 23 2014, @11:47PM

              by dmc (188) on Sunday February 23 2014, @11:47PM (#5379)

              It's bad enough. Quite a few people would consider it as good as useless and would take their phones back to the shop asking for a replacement, maybe not you, but the average consumer.

              I think that is a sad sad commentary on the state of customer support for products in this day and age. Now before you get off my lawn, let me tell you about a time when people's first inclination when an electronic gizmo or software like that stopped working was to look at that paper user manual with a prominent tech-support phone-number on it, dial it up, talk to a human, and be told how to work around some such minor repairable defect such as this.

              Although it's noteworthy that I have seen a few more expensive devices these days come with some brightly colored piece of paper saying "don't return this to the store, call us instead". Although I find those somewhat offensive because what it should say is- "if you are having a problem and would like to figure out the issue, give us a call and we'd be happy to help, though by all means, if your store has a refund and/or exchange policy, you are certainly still welcome to go that route instead".

              • (Score: 5, Funny) by Anonymous Coward on Monday February 24 2014, @12:01AM

                by Anonymous Coward on Monday February 24 2014, @12:01AM (#5385)

                I tried to call them. But then I realised my phone was not working so I picked up a brick and used that instead and got myself a new iPhone from the shop window.

                • (Score: 0) by Anonymous Coward on Monday February 24 2014, @05:04AM

                  by Anonymous Coward on Monday February 24 2014, @05:04AM (#5555)

                  Why would you wan't to install windows on your iphone?

              • (Score: 2, Interesting) by lhsi on Monday February 24 2014, @08:37AM

                by lhsi (711) on Monday February 24 2014, @08:37AM (#5682) Journal

                Although it's noteworthy that I have seen a few more expensive devices these days come with some brightly colored piece of paper saying "don't return this to the store, call us instead". Although I find those somewhat offensive because what it should say is- "if you are having a problem and would like to figure out the issue, give us a call and we'd be happy to help, though by all means, if your store has a refund and/or exchange policy, you are certainly still welcome to go that route instead".

                Often the returns policy is one sided for the stores compared to the manufacturer and they lose out on returns, so I can see why they'd try and reduce the return rate (of course the bigger problem is that some places will just accept anything to be returned and charge it back to the manufacturer).

                I'm sure I heard once that there was a similar number to call if you were unhappy with the quality of some cheese, so it's not just high-price electronics that is affected.

              • (Score: 2) by dilbert on Monday February 24 2014, @02:05PM

                by dilbert (444) on Monday February 24 2014, @02:05PM (#5806)

                what it should say is- "if you are having a problem and would like to figure out the issue, give us a call and we'd be happy to help, though by all means, if your store has a refund and/or exchange policy, you are certainly still welcome to go that route instead".

                I suspect that requires too much brainpower for most people (both the marketers writing the crap, and the general population who can't even be arsed to RTFM)

          • (Score: 1) by EvilJim on Tuesday February 25 2014, @11:37PM

            by EvilJim (2501) on Tuesday February 25 2014, @11:37PM (#7003) Journal

            Pound caked?

        • (Score: 1, Informative) by Anonymous Coward on Sunday February 23 2014, @11:33PM

          by Anonymous Coward on Sunday February 23 2014, @11:33PM (#5369)

          > On android that would be soft-bricked, so it's still bricked.

          What is "soft-bricked"?

          I thought the term "bricked" meant "irreparably corrupted/damaged" so that the device is no longer useful as anything but a paperweight. I don't think it matters whether that's due to a hardware or software failure.

          • (Score: 1) by Acabatag on Sunday February 23 2014, @11:41PM

            by Acabatag (2885) on Sunday February 23 2014, @11:41PM (#5374)

            I think there is some level below which a device can be truly called "bricked." But this isn't that. A device that can only be recovered by opening it and soldering in a jtag connector or some sort of debug terminal is would qualify as "bricked." Hardware that just requires some special sequence on the touchscreen or physical buttons? Not so bricked.
             

            • (Score: 0) by Anonymous Coward on Monday February 24 2014, @12:47AM

              by Anonymous Coward on Monday February 24 2014, @12:47AM (#5404)

              Yeah, I supposed "bricked" could just as easily mean "made to act like a brick." :)

      • (Score: 2, Funny) by maratumba on Monday February 24 2014, @04:04AM

        by maratumba (938) on Monday February 24 2014, @04:04AM (#5513) Journal

        Time to fork the Soylent News.

    • (Score: 3, Informative) by Darth Turbogeek on Monday February 24 2014, @12:25AM

      by Darth Turbogeek (1073) on Monday February 24 2014, @12:25AM (#5395)

      Yeah but....iTunes. You may as well have bricked it becuase no PC deserves THAT to be installed.

      • (Score: 2, Funny) by Acabatag on Monday February 24 2014, @12:31AM

        by Acabatag (2885) on Monday February 24 2014, @12:31AM (#5397)

        Possibly the whole thing is a ploy to get people to install iTunes....

    • (Score: 2) by evilviper on Monday February 24 2014, @01:02AM

      by evilviper (1760) on Monday February 24 2014, @01:02AM (#5414) Homepage Journal

      ... their iPhone, iPad or iPod Touch requires a connection to iTunes to restart

      Doesn't seem bricked to me.

      You just don't know how advanced red clay bricks are becoming these days. Yes, these days bricks have USB ports, and can download music and movies from iTunes.

      But a red apple with a bite taken out of it? Now THAT'S a useless hunk of junk.

      --
      Hydrogen cyanide is a delicious and necessary part of the human diet.
      • (Score: 2) by VLM on Monday February 24 2014, @12:51PM

        by VLM (445) on Monday February 24 2014, @12:51PM (#5764)

        "You just don't know how advanced red clay bricks are becoming these days. Yes, these days bricks have USB ports"

        AKA

        http://deaddrops.com/ [deaddrops.com]

        The closest one to me apparently has never been visited since installation (aka it was immediately destroyed), and the next closest is rusted out, reported broken, and up for replacement "soon" since 2012. But they were a "thing" for a short period of time in the early 2010s.

        • (Score: 1) by EvilJim on Tuesday February 25 2014, @11:41PM

          by EvilJim (2501) on Tuesday February 25 2014, @11:41PM (#7005) Journal

          yeah, a fantastic re-purpose for your old 128mb flash drive, useless for anything but txt files. or maybe a couple of mp3's. what they need it to come up with a new connector which doesn't rust, isn't easily spotted or broken by people who have no idea what it's for.

    • (Score: 3, Interesting) by frojack on Monday February 24 2014, @01:06AM

      by frojack (1554) on Monday February 24 2014, @01:06AM (#5418) Journal

      But why should you need a computer to manage a phone?

      People with iPhones simply take this for granted. People with Android often NEVER connect their phone to a computer for the entire life of the the phone. (Unless they are Apple refugees unable to break the habit).

      When you follow the linked article to the actual postings, these people are having to factory reset their devices, and re-install their latest backup. If you are traveling, or away from your computer this is for all intents and purposes bricked till you get home.

      Anything that can't be fixed with a simple reboot is bricked by my definition.

      --
      No, you are mistaken. I've always had this sig.
      • (Score: 1) by MachineShedFred on Monday February 24 2014, @02:23AM

        by MachineShedFred (1656) on Monday February 24 2014, @02:23AM (#5452)

        That's funny, because everyone I know with an iOS device hasn't cabled up since iOS 5, when over-the-air updating was introduced. Backups and music is all done over network.

        The only time you need to cable up is if something happened to the OS image, or if you actually want to.

        Oh, and if "your definition" doesn't match with the generally accepted definition, then we call your definition "wrong." Something that is bricked is only as useful as it's mass, and is completely unrecoverable without warranty repair or outright replacement.

  • (Score: 4, Informative) by FrogBlast on Sunday February 23 2014, @10:29PM

    by FrogBlast (21) on Sunday February 23 2014, @10:29PM (#5342)

    If you don't want to update to 7.0.6 for some reason (like potential bricking), there is a patch available through a Cydia to close the vulnerability in question. Add repo http://yangapp.googlecode.com/svn [googlecode.com] and install "SSL Patch"

    By way of warning, I haven't bothered to do it yet, as I'm stuck at work, but the folks at the jail break subreddit seem to be using it successfully. http://www.reddit.com/r/jailbreak/comments/1yq24t/ cydia_tweak_for_fixing_ssl_bug_in_ios_below_706/ [reddit.com]

    • (Score: 1) by denmarkw00t on Sunday February 23 2014, @10:51PM

      by denmarkw00t (2877) on Sunday February 23 2014, @10:51PM (#5350)

      Thanks, I was just wondering about whether or not the Jailbreak community would whip up something like this.

      --
      buck feta
  • (Score: 5, Funny) by clone141166 on Sunday February 23 2014, @10:33PM

    by clone141166 (59) on Sunday February 23 2014, @10:33PM (#5343)

    The new soylent news "OS" news icon looks exactly like the terminal icon on my desktop. I kept clicking it thinking it would open a bash term.

    *Waits to be modded offtopic* :)

    • (Score: 1, Offtopic) by Fluffeh on Sunday February 23 2014, @10:45PM

      by Fluffeh (954) Subscriber Badge on Sunday February 23 2014, @10:45PM (#5346) Journal

      What is this desktop you speak of, and why do you think that pressing something on your desk would open something on your computer?

      • (Score: 2, Funny) by Acabatag on Sunday February 23 2014, @11:45PM

        by Acabatag (2885) on Sunday February 23 2014, @11:45PM (#5377)

        He perhaps has a hinged folding cover built into his desktop that conceals his teletype's keyboard in a clever and decorative fashion.

        I am just speculating, though.

  • (Score: 4, Funny) by RedBear on Sunday February 23 2014, @10:48PM

    by RedBear (1734) on Sunday February 23 2014, @10:48PM (#5347)

    Maybe it was just a fluke, but I got a 508 error the first time I tried to load the link. It warms the cockles of my heart to think we might be in the midst of our first "SoylentNewsing" of somebody's server. Doesn't quite roll off the tongue the same way though.

    --
    ¯\_ʕ◔.◔ʔ_/¯ LOL. I dunno. I'm just a bear.
    ... Peace out. Got bear stuff to do. 彡ʕ⌐■.■ʔ
    • (Score: 5, Funny) by NCommander on Sunday February 23 2014, @11:00PM

      by NCommander (2) Subscriber Badge <michael@casadevall.pro> on Sunday February 23 2014, @11:00PM (#5354) Homepage Journal

      I think the term "soyled" has become the correct terminology.

      --
      Still always moving
    • (Score: 5, Funny) by clone141166 on Sunday February 23 2014, @11:07PM

      by clone141166 (59) on Sunday February 23 2014, @11:07PM (#5357)

      I believe [correct me if I am wrong] that we have settled on the term "Soyled".

      Example:
      A: "Did you see that link to the Apple story on SoylentNews today?"
      B: "Nope?"
      A: "The server soyled itself under the load."

  • (Score: 4, Informative) by qwade on Sunday February 23 2014, @11:02PM

    by qwade (1006) on Sunday February 23 2014, @11:02PM (#5356)

    A little more info in the following link:

    Apple security flaw allows hackers to beat encryption [theage.com.au]

    TL;DR - It's a bug in the SSL implementation which doesn't properly verify certificates.

    • (Score: 4, Insightful) by Acabatag on Monday February 24 2014, @12:36AM

      by Acabatag (2885) on Monday February 24 2014, @12:36AM (#5399)

      From what I have read, in a comment on some other tech news site that doesn't need to be discussed here, the bug acts such that Apple's software completely ignores the certificate. In other words, Apple's QA testing did not include the test case: 'Try to use SSL on a site with a fake certificate.' Which is so staggering that I am still waiting for somebody to contradict it. (Maybe on this better, more intelligent forum, someone can expand on this for us)

  • (Score: 3, Funny) by tftp on Monday February 24 2014, @02:01AM

    by tftp (806) on Monday February 24 2014, @02:01AM (#5438) Homepage

    Apple released iOS 7.0.6 to patch a vulnerability which, if unpatched, could allow attackers to capture or modify data in sessions protected by SSL/TLS

    There is nothing wrong with the patch. Apple claimed that it prevents attackers from capturing or modifying data in SSL/TLS sessions. Does the patch do that? YES! (The fact that the whole device is unusable is just a minor detail that was not mentioned in the design requirements.)

    • (Score: 1) by i7quad on Monday February 24 2014, @06:37AM

      by i7quad (586) on Monday February 24 2014, @06:37AM (#5609)

      LOL ! ... so the 'brick' part of the results is just ... 'collateral damage', eh?