https://insinuator.net/tags/itunes/ Recent content in ITunes on Insinuator.net - Bold Statements Hugo en-us Mon, 28 Nov 2011 00:00:00 +0000 https://insinuator.net/2011/11/on-the-discussion-about-the-itunes-10.5.1-update/ Mon, 28 Nov 2011 00:00:00 +0000 https://insinuator.net/2011/11/on-the-discussion-about-the-itunes-10.5.1-update/ <p>Currently there’s <a href="http://krebsonsecurity.com/2011/11/apple-took-3-years-to-fix-finfisher-trojan-hole/">quite some discussion</a> ongoing why it took Apple so long to fix a <a href="http://support.apple.com/kb/HT5030">severe vulnerability in the update process</a> of iTunes. A severe vulnerability which could easily be exploited by means of an automated tool called <a href="http://www.infobytesec.com/down/isr-evilgrade-Readme.txt">evilgrade</a> which can be downloaded <a href="http://www.infobytesec.com/developments.html">here</a> (Hi Francisco!). Just one small note here: did you know that evilgrade was first shown and released at the <a href="http://www.troopers08.org/content/">2008 edition</a> of <a href="http://www.troopers.de">Troopers</a>? We had a number of initial releases of tools in the last years (like <a href="http://code.google.com/p/waffit/source/browse/trunk/wafw00f.py">wafw00f</a> at the <a href="http://www.troopers09.org/content/">2009 edition</a> and <a href="http://vasto.nibblesec.org/">VASTO</a> at the <a href="http://www.troopers10.org/content/e3/index_eng.html">2010 edition</a>) and we will continue this fine tradition in 2012. I can already promise that some nice code is going to be released for the first time at Troopers12…</p>