Posted 02/24/2014 at 3:09 PM
Posted 3 years ago
It appears that the same flaw effects email and other services, even on fully patched Macs running OS X.
There also does not appear to be a patch for this vulnerability.
One way to be sort of on the safe side, would be for Mac users to avoid using public networks.
A Johns Hopkins University professor, Matt Green, said an attacker “can basically set up a connection and pretend to be Google.com.”
On OS X 10.9.1, Mail, Safari, and possibly iCal, are susceptible to attack, due to this flaw.
Apple has not yet commented on this issue.