Apple Fixes iOS 11.2 HomeKit Flaw; Allowed Unauthorized Remote Access to Homes

HomeKit

9to5Mac believes their learning of the vulnerability has resulted in Apple providing a fix earlier than it would have otherwise.

The unauthorized access suggests a significant security vulnerability that was allowed to slip through the cracks by Apple's development team. Getting that functionality back will require updating to the latest version of iOS.

Details on how the vulnerability can be exploited were not released as the bug is still potentially exploitable.

The issue was with the HomeKit framework and not individual smart home products.

Se reúnen Meade y Nuño rumbo a elección 2018
El nuevo titular de Educación será Otto Granados Roldán , quien se desempeñaba como subsecretario de Planeación y Evaluación de Políticas Educativas de la SEP .

The vulnerability has not been described and has been patched via a server-side update which also disables sharing access keys with others (leaving me to assume that this is where the hole is), but it does make for a rather torrid series of security bad news for the Cupertino company.

The iPhone maker said in a statement, "The issue affecting HomeKit users running iOS 11.2 has been fixed". Apple has already fixed the issue on its end, and next week users can get a software update that fixes the bug on their end. Just be sure to install the iOS update when it's released in order to regain the reduced functionality.

Apple is reportedly rolling out a server-side fix for a critical, zero-day HomeKit vulnerability in iOS 11.2 that allowed unauthorized access to smart devices and accessories. Apple was apparently informed about this and related vulnerabilities in late October; however, not all issues were fixed by the time iOS 11.2 and watchOS 4.2 were released.

The existence of the vulnerability isn't necessarily damning for HomeKit as a product, but it does raise questions for users as to how much they should trust to the application.

Related news:

Hot News

isis-killer-beheading-video-story-top Johnson & Johnson (JNJ) Shares Bought by IFM Investors Pty Ltd
Dec 08, 2017 - 04:45
Pathstone Family Office Limited Liability Corp stated it has 0.23% of its portfolio in Johnson & Johnson (NYSE:JNJ). (NYSE:SOR). Hexavest Inc decreased its stake in Johnson & Johnson (JNJ) by 2.96% based on its latest 2017Q2 regulatory filing with the SEC.

isis-killer-beheading-video-story-top Philippe Coutinho Refuses to Rule Out January Move Away From Liverpool
Dec 08, 2017 - 04:30
From where I see it, he is more comfortable inside, but the good thing about this player is that he can play in several positions. Last summer there was a job offer and in the same way that happens with any employee I was interested in it.

isis-killer-beheading-video-story-top Sydney Loofe Photos: Full Story & Must-See Details
Dec 08, 2017 - 04:20
Loofe had gone on a date with a woman she met online, then failed to show up at work the next day at a Menards in Lincoln. They were later taken into custody, though they have not been charged in connection with Loofe's disappearance.

Comcast Corporation (CMCSA) Stock Formed Bullish Double Top. What To Expect?
Dec 08, 2017 - 04:18
The firm owned 1,563,286 shares of the cable giant's stock after buying an additional 556,468 shares during the period. Kentucky Retirement Insurance Trust Fund has invested 0.9% of its portfolio in Comcast Corporation (NASDAQ:CMCSA).

isis-killer-beheading-video-story-top US House Intelligence chairman cleared of disclosing classified information
Dec 08, 2017 - 04:15
Bowing to pressure, however, he ceded control of the Intelligence Committee's investigation to Republican Reps. Trump falsely claimed on Twitter that President Barack Obama had wiretapped Trump Tower during the transition.

isis-killer-beheading-video-story-top Manchester United best and worst case scenario for Champions League knockout stage
Dec 08, 2017 - 04:12
Paris Saint-Germain won Group B despite losing at Bayern Munich 3-1, the second straight loss for the French league leader. Finalists in 2014 and 2016, Atletico must now accept a spot in the Europa League following a slow start to the season.

isis-killer-beheading-video-story-top Matthew Tkachuk suspended one game for unsportsmanlike conduct
Dec 08, 2017 - 04:09
Tkachuk also received a two-game suspension in March 2016 for an elbow to the face of Los Angeles Kings defenseman Drew Doughty. After the game, Leafs head coach Mike Babcock called the move " junior hockey stuff ". "But man, you gotta give Tkachuk credit.

isis-killer-beheading-video-story-top Fallen Kingdom behind-the-scenes video features Jeff Goldblum and Carnotaurus
Dec 08, 2017 - 04:08
The trailer gives us our first insight into what Fallen Kingdom will be about; up until now, neither the studio nor director J.A. Bayona appears to be going full-on horror with this film, and not in a pseudo-horror way like the first Jurassic World .

ProShares UltraPro Short Dow30 (SDOW) Rises 0.1% for Dec 6
Dec 08, 2017 - 04:06
Used as a coincident indicator, the CCI reading above +100 would reflect strong price action which may signal an uptrend. A reading under 20 would indicate no trend, and a reading from 20-25 would suggest that there is no clear trend signal.

isis-killer-beheading-video-story-top AeroVironment, Inc. (AVAV) Surges to Record High, Is Now Top Performer
Dec 08, 2017 - 04:00
PEAK6 Investments L.P. owned about 0.15% of AeroVironment worth $1,897,000 at the end of the most recent reporting period. Following the completion of the transaction, the chairman now owns 58,138 shares in the company, valued at $3,134,219.58.

isis-killer-beheading-video-story-top Serena Williams gets emotional just thinking about the end of breastfeeding
Dec 08, 2017 - 03:58
The athletic giant revealed that it is naming a yet-to-be-constructed building at its world headquarters after Williams. Williams' building is part of Nike's planned campus expansion that will also see two more buildings built next year.

isis-killer-beheading-video-story-top #QLDVotes Labor claims its 48th seat, however LNP is yet to concede
Dec 08, 2017 - 03:50
Labor is certain to win at least 47 seats in Queensland's unicameral parliament, guaranteeing a slim majority. Ms Frecklington announced she would contest the LNP leadership and Tim Mander had agreed to run as her deputy.

isis-killer-beheading-video-story-top Enbridge Energy, LP (NYSE:EEP) Position Boosted by Macquarie Group Ltd.
Dec 08, 2017 - 03:35
Atlantic Trust Group Llc acquired 403,750 shares as Enbridge Energy Mgmt L L C Shs Units (EEQ)'s stock declined 4.12%. It also reduced Old Dominion Fght Lines Inc Com (NASDAQ:ODFL) stake by 916,430 shares and now owns 794,768 shares.

isis-killer-beheading-video-story-top UC Berkeley law student has testy exchange with AG Jeff Sessions
Dec 08, 2017 - 03:24
"I grew up in the projects to a single mother and the people we are afraid of are not necessarily our neighbors, but the police. ABC News has unearthed video of a summer event attended by both a handful of interns and Sessions himself.

isis-killer-beheading-video-story-top BRITISH COLUMBIA INVESTMENT MANAGEMENT Corp Decreases Position in Phillips 66 (PSX)
Dec 08, 2017 - 02:47
Phillips 66 had 57 analyst reports since August 4, 2015 according to SRatingsIntel. 971 were reported by Webster Bank & Trust N A. This repurchase authorization authorizes the oil and gas company to repurchase shares of its stock through open market purchases.