Apple Fixes iOS 11.2 HomeKit Flaw; Allowed Unauthorized Remote Access to Homes

HomeKit

9to5Mac believes their learning of the vulnerability has resulted in Apple providing a fix earlier than it would have otherwise.

The unauthorized access suggests a significant security vulnerability that was allowed to slip through the cracks by Apple's development team. Getting that functionality back will require updating to the latest version of iOS.

Details on how the vulnerability can be exploited were not released as the bug is still potentially exploitable.

The issue was with the HomeKit framework and not individual smart home products.

Facebook adds support for live streaming and video chats to Messenger games
Once selected, you can choose the audience you want to broadcast to and add a short description to say something about your video. The idea with Instant Games is to boost people's time spent in Messenger by giving them something else to do besides just chat.

The vulnerability has not been described and has been patched via a server-side update which also disables sharing access keys with others (leaving me to assume that this is where the hole is), but it does make for a rather torrid series of security bad news for the Cupertino company.

The iPhone maker said in a statement, "The issue affecting HomeKit users running iOS 11.2 has been fixed". Apple has already fixed the issue on its end, and next week users can get a software update that fixes the bug on their end. Just be sure to install the iOS update when it's released in order to regain the reduced functionality.

Apple is reportedly rolling out a server-side fix for a critical, zero-day HomeKit vulnerability in iOS 11.2 that allowed unauthorized access to smart devices and accessories. Apple was apparently informed about this and related vulnerabilities in late October; however, not all issues were fixed by the time iOS 11.2 and watchOS 4.2 were released.

The existence of the vulnerability isn't necessarily damning for HomeKit as a product, but it does raise questions for users as to how much they should trust to the application.

Related news:

Hot News

Brandywine Realty Trust (BDN) Given Daily Media Impact Rating of 0.32
Dec 08, 2017 - 04:46
The firm owned 1,543,242 shares of the real estate investment trust's stock after selling 70,702 shares during the period. The investor is now holding $14.37 million shares due in part to a decrease of 313377 new shares in their portfolio.

isis-killer-beheading-video-story-top Johnson & Johnson (JNJ) Shares Bought by IFM Investors Pty Ltd
Dec 08, 2017 - 04:45
Pathstone Family Office Limited Liability Corp stated it has 0.23% of its portfolio in Johnson & Johnson (NYSE:JNJ). (NYSE:SOR). Hexavest Inc decreased its stake in Johnson & Johnson (JNJ) by 2.96% based on its latest 2017Q2 regulatory filing with the SEC.

isis-killer-beheading-video-story-top Wildfires destroy at least 30 homes in Los Angeles County
Dec 08, 2017 - 04:44
Los Angeles Mayor Eric Garcetti declared a state of emergency while 11 Los Angeles Unified schools canceled Wednesday classes. Forecasters are calling for another afternoon of gusty winds, which will help fuel the fires on Wednesday.

isis-killer-beheading-video-story-top Bryan Singer Sued For Allegedly Raping 17-Year-Old Boy!
Dec 08, 2017 - 04:39
Sanchez-Guzman states that he was 17 at the time of the party and did not know Singer except that he was a friend of Waters. The famed X-Men director is well known for hosting lavish parties attended by young men you might call "twinks".

isis-killer-beheading-video-story-top Irrfan Khan gets special award at Dubai International Film Festival
Dec 08, 2017 - 04:33
Read : You can get your hands on Meghan Markle's style right here in Dubai ... Read : So many A-listers jetted into Dubai for this super-luxe party ...

isis-killer-beheading-video-story-top Philippe Coutinho Refuses to Rule Out January Move Away From Liverpool
Dec 08, 2017 - 04:30
From where I see it, he is more comfortable inside, but the good thing about this player is that he can play in several positions. Last summer there was a job offer and in the same way that happens with any employee I was interested in it.

isis-killer-beheading-video-story-top Christmas tree recycling is easy and environmentally friendly
Dec 08, 2017 - 04:19
From shopping malls to the homes of families across the country, this gravity-defying tree trend is seemingly everywhere. This year, people have been loving upside down Christmas trees , decorated ladders , and even festive pineapples .

isis-killer-beheading-video-story-top Matthew Tkachuk suspended one game for unsportsmanlike conduct
Dec 08, 2017 - 04:09
Tkachuk also received a two-game suspension in March 2016 for an elbow to the face of Los Angeles Kings defenseman Drew Doughty. After the game, Leafs head coach Mike Babcock called the move " junior hockey stuff ". "But man, you gotta give Tkachuk credit.

isis-killer-beheading-video-story-top AeroVironment, Inc. (AVAV) Surges to Record High, Is Now Top Performer
Dec 08, 2017 - 04:00
PEAK6 Investments L.P. owned about 0.15% of AeroVironment worth $1,897,000 at the end of the most recent reporting period. Following the completion of the transaction, the chairman now owns 58,138 shares in the company, valued at $3,134,219.58.

isis-killer-beheading-video-story-top Serena Williams gets emotional just thinking about the end of breastfeeding
Dec 08, 2017 - 03:58
The athletic giant revealed that it is naming a yet-to-be-constructed building at its world headquarters after Williams. Williams' building is part of Nike's planned campus expansion that will also see two more buildings built next year.

isis-killer-beheading-video-story-top #QLDVotes Labor claims its 48th seat, however LNP is yet to concede
Dec 08, 2017 - 03:50
Labor is certain to win at least 47 seats in Queensland's unicameral parliament, guaranteeing a slim majority. Ms Frecklington announced she would contest the LNP leadership and Tim Mander had agreed to run as her deputy.

isis-killer-beheading-video-story-top Polish finance minister to replace PM Beata Szydlo
Dec 08, 2017 - 03:41
Two bills are set for a final vote in parliament Friday that would give the government greater control of the judicial system. Further changes to the government are due in January, senior party officials added.

What is Suggestion of Analyst about:: Rite Aid Corporation (RAD)
Dec 08, 2017 - 03:38
Vericel Corporation (NASDAQ:VCEL) attracted a lower number of shares in volume with 0.63 million contracts traded on 05-Dec-17. Its minimum price target estimates has been figured out at $2 while the maximum price target forecast is established at $2.5.

isis-killer-beheading-video-story-top Enbridge Energy, LP (NYSE:EEP) Position Boosted by Macquarie Group Ltd.
Dec 08, 2017 - 03:35
Atlantic Trust Group Llc acquired 403,750 shares as Enbridge Energy Mgmt L L C Shs Units (EEQ)'s stock declined 4.12%. It also reduced Old Dominion Fght Lines Inc Com (NASDAQ:ODFL) stake by 916,430 shares and now owns 794,768 shares.

Se reúnen Meade y Nuño rumbo a elección 2018
Dec 08, 2017 - 03:24
El nuevo titular de Educación será Otto Granados Roldán , quien se desempeñaba como subsecretario de Planeación y Evaluación de Políticas Educativas de la SEP .