Apple on The Truth Imperative

Ios Clients Not Vulnerable To Heartbleed What Does The Source Say

Thu, 17 Apr 2014 15:05:00 -0700

Apple’s language in their assertion that they are not vulnerable to heartbleed on iOS are troubling as they specifically say (via ReCode), “IOS and OS X never incorporated the vulnerable software…” However, not incorporating the vulnerable OpenSSL software is merely one way that their customers could have been made vulnerable. What about the Apple SSL/TLS implementation? Has anyone checked it? Did they incorporate RFC 6520 for heartbeat support? I couldn’t find anything Google so figured I would share what I found.

Using VNC to securely connect to OSX without exposing an unlocked console

Sun, 13 Apr 2014 22:27:00 -0700

I couldn’t believe how supremely difficult it is to securely use VNC to access an OSX mac remotely. Turns out that by default, using a standard VNC client (as opposed to an Apple Remote Desktop client) does not afford you an option to have the physical console lock when someone connects to the VNC server. Some third-party clients make this an option, but all that I could find were paid VNC clients that support it. It is somewhat ridiculous that this setting is left to the client rather than enforced on the server, but I digress…