SSL hell: Apple's software isn't good enough

iOS 7
Today's conspiracy theory: the NSA is using Apple's SSL vulnerability

Let's play word association. Insecure. Buggy. Arrogant.

Did you say Microsoft?

Bzzt! Wrong answer!

I'm talking about Apple.

As I write this, OS X users are still waiting on a patch for a critical security flaw that means online banking on a public network is a really bad idea.

We're hearing that the bug will be squashed in the forthcoming OS X 10.9.2 update, which apparently also fixes problems with Mavericks' Mail that cause messages to disappear for no good reason, along with multiple other bug fixes.

Meanwhile, iOS users are hoping that the forthcoming iOS 7.1 update will stop their devices rebooting all the time and sort the serious bugs in AirPlay mirroring.

Whatever happened to It Just Works?

The fix is in, eventually

In 2012, Tim Cook made a solemn vow: "We're going to double-down on secrecy on products." Perhaps he should have doubled down on staffing for Apple's software.

The current SSL problem is a particularly embarrassing one for Apple: having disclosed it but not fixed it, Apple has put Safari users - and anyone else using OS X apps that need SSL - in a potentially vulnerable position.

Fixing iOS - including iOS 6 - but not OS X suggests one of two things. Either Apple doesn't really give a toss about OS X users, or it doesn't have enough people to patch two OSes simultaneously (John Gruber reports a third one that's doing the rounds of conspiracy theorists: that the flaw is there because the NSA is using it).

Conspiracy

The problem isn't that Apple software has vulnerabilities and bugs. All software has that. The problem is that the vulnerabilities and bugs don't appear to be getting fixed very quickly.

This matters, because Apple's appeal is built on a hard-won reputation for quality, a reputation that enables Apple to charge premium prices for its products. You pay Apple prices because it just works.

When it doesn't - when Safari crashes your iPad for the umpteenth time, when you're reading advice not to do anything important on public Wi-Fi until Apple gets round to patching your OS, when you can't trust your computer's default email client - you start to wonder what exactly you're paying for.

This isn't an Apple-is-doomed post. It'll take a lot more than an unpatched SSL vulnerability to drive sensible people from OS X to Windows 8. But these things matter, and the more of them there are the more they'll matter to even the most committed Apple owners.

The people I'm seeing post about Apple issues aren't Samsung fans or Microsoft evangelists: they're the people you'll usually find first in line whenever there's a new toy in the Apple Store.

TOPICS
Carrie Marshall
Contributor

Writer, broadcaster, musician and kitchen gadget obsessive Carrie Marshall has been writing about tech since 1998, contributing sage advice and odd opinions to all kinds of magazines and websites as well as writing more than a dozen books. Her memoir, Carrie Kills A Man, is on sale now and her next book, about pop music, is out in 2025. She is the singer in Glaswegian rock band Unquiet Mind.

Latest in Software
A young woman is working on a laptop in a relaxed office space.
I’ll admit, Microsoft’s new Windows 11 update surprised me with its usefulness, providing accessibility fixes, a gamepad keyboard layout, and PC spec cards
The Kiwi design K4 Boost Battery strap being worn by Hamish
I test VR headsets for a living, and this affordable headstrap is the first Meta Quest 3 accessory you should buy
Both Kiwi design G4 Pro Performance Controller Grips
I thought VR controller grips were pointless until this Meta Quest 3 accessory proved me wrong
The Kiwi design H4 Boost Halo Battery Strap
Want to upgrade your VR headset? Look no further than my new favorite Meta Quest 3 headstrap
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC
Gemini on a smartphone.
Gemini 2.5 is now available for Advanced users and it seriously improves Google’s AI reasoning
Latest in News
A young woman is working on a laptop in a relaxed office space.
I’ll admit, Microsoft’s new Windows 11 update surprised me with its usefulness, providing accessibility fixes, a gamepad keyboard layout, and PC spec cards
inZOI promotional material.
inZOI has become the most wishlisted game on Steam, but I wouldn't get too caught up in the hype
Xbox Series X and Xbox wireless controller set to a green background
Xbox Insiders are currently testing a new Game Hub feature that looks useful, but I've got mixed feelings about it
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Nespresso Vertuo Pop machine in Candy Pink with coffee drinks and capsules
My favorite Nespresso coffee maker just got a fresh new makeover, and now I love it even more
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC