Another security bug found in iOS

Stefan Mileschin · 26th September 2019, 16:37

You probably were not expecting this

Fruity cargo cult Apple is warning users of a bug in iOS 13 and iPadOS involving third-party keyboards.

In a brief advisory, the tech giant said the bug impacts third-party keyboards which for some reason the operating system gives "full access" permissions.

Third-party keyboards can either run as standalone or with "full access" they can talk to other apps or get internet access for additional features, like spell check.

But some Apple software genius thought it would be a wizard wheeze to give such keyboards "full access" which allows the keyboard maker to capture to its servers keystroke data or anything you type -- like emails, messages or passwords. It may allow third-party keyboards to gain full access permissions -- even if it was not approved, Apple said.

Apple didn’t say much more about the problem; we assume the PR team was having difficulty with its collective cognitive dissonance and trying to reconcille the fact that there might be a security bug in Apple gear.

The advisory said that the bug doesn’t affect iOS’ in-built keyboard. The bug will be fixed in an upcoming software update one of these days.

https://fudzilla.com/news/49469-anot...ity-bug-in-ios

26th September 2019, 16:37	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,575	Another security bug found in iOS You probably were not expecting this Fruity cargo cult Apple is warning users of a bug in iOS 13 and iPadOS involving third-party keyboards. In a brief advisory, the tech giant said the bug impacts third-party keyboards which for some reason the operating system gives "full access" permissions. Third-party keyboards can either run as standalone or with "full access" they can talk to other apps or get internet access for additional features, like spell check. But some Apple software genius thought it would be a wizard wheeze to give such keyboards "full access" which allows the keyboard maker to capture to its servers keystroke data or anything you type -- like emails, messages or passwords. It may allow third-party keyboards to gain full access permissions -- even if it was not approved, Apple said. Apple didn’t say much more about the problem; we assume the PR team was having difficulty with its collective cognitive dissonance and trying to reconcille the fact that there might be a security bug in Apple gear. The advisory said that the bug doesn’t affect iOS’ in-built keyboard. The bug will be fixed in an upcoming software update one of these days. https://fudzilla.com/news/49469-anot...ity-bug-in-ios

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Three more security holes found in Intel chips	Stefan Mileschin	WebNews	0	16th August 2018 08:15
Critical Heathrow Airport security files found in the bushes	Stefan Mileschin	WebNews	0	11th November 2017 05:03
Heathrow Airport security documents found on random USB stick	Stefan Mileschin	WebNews	0	1st November 2017 06:18
Critical Security Bugs Dating Back to 1987 Found in X Window	Stefan Mileschin	WebNews	0	15th December 2014 10:46
New Security Hole Found in Wi-Fi Routers: Disable UPnP to Protect Yourself	Stefan Mileschin	WebNews	0	31st January 2013 08:48
Apple Kicks Developer That Found iOS Security Flaw	Stefan Mileschin	WebNews	0	8th November 2011 08:21
High risk security flaw found in Office 2007	jmke	WebNews	0	25th February 2007 10:37
Huge Security Hole Found in Symantec Antivirus Software	jmke	WebNews	0	27th May 2006 15:42
Two serious security holes found in Firefox	Sidney	WebNews	0	9th May 2005 03:56
Major security bug found in Unreal Engine	jmke	WebNews	0	22nd June 2004 11:58