123

Apple releases macOS 10.13.1 and iOS 11.1 with a KRACK fix and new emoji | Ars T...

 6 years ago
source link: https://arstechnica.com/gadgets/2017/10/apple-releases-macos-10-13-1-and-ios-11-1-with-a-krack-fix-and-new-emoji/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Sealing the KRACK —

Apple releases macOS 10.13.1 and iOS 11.1 with a KRACK fix and new emoji

Several bugs were fixed, and a lost 3D Touch gesture has returned to iOS.

Samuel Axon - 10/31/2017, 7:05 PM

Apple releases macOS 10.13.1 and iOS 11.1 with a KRACK fix and new emoji

Today, Apple released iOS 11.1 and macOS High Sierra 10.13.1, which bring a notable security update, bug fixes, and a handful of other changes to modern iPhones, iPads, iPods, and Macs.

Critically, both software updates address the KRACK Wi-Fi vulnerability for some devices. It is a serious vulnerability in the WPA2 Wi-Fi security standard that allowed hostile actors to perform a key reinstallation and listen to Wi-Fi traffic for passwords and other personal data, among other things.

Update: As Ars readers have pointed out, Apple's support documentation states that the iOS KRACK fix is available for iPhone 7 and later, and for the early 2016, 9.7-inch iPad Pro and later. It is unclear whether this means previous devices are still vulnerable, or they had previously not been vulnerable and thus didn't need an update. Ars has reached out to Apple for comment.

Both also introduce numerous new Unicode 10.0 emoji. As previously reported, they include the "I love you" hand sign, a wizard, a takeout food box, gender-neutral characters, and much more. Here are a few of the emoji that have been added.

  • ASL sign for "I love you."
  • One of the new "genderless" emoji.
  • Genderless emojis come in different skin and hair colors.
  • All ages are represented with genderless emojis, too.
  • Fairy emoji.
  • Whimsical mermaid emoji with multicolored locks.
  • Blood-sucking vampire emoji.
  • Wizard emoji (is that you, Dumbledore?).
  • Takeout food emoji (now on your phone, as well as on your coffee table).
  • "Veggie" emoji—just a lonely piece of broccoli.
  • New hat emoji.
  • Pair of gloves emoji.
  • Scarf emoji to keep your emoji-self warm this winter.
  • New trench coat emoji.

Additionally, macOS 10.13.1 fixed bugs like Bluetooth appearing unavailable while using Apple Pay and keyboard input sometimes not working in Spotlight. For the enterprise, Apple says this update adds support for unlocking a FileVault-encrypted APFS volume using a recovery keychain file. It also makes SMB printing more reliable and makes it possible to access Touch ID preferences on recent MacBook Pros while logged in as a mobile account.

Advertisement

iOS 11.1 brings back a 3D Touch gesture that allows you to switch between apps by gesturing or applying pressure at the sides of the screen. Apple had removed this functionality in a previous release. The update fixes several small issues with Photos and makes some improvements to various accessibility features.

Apple also released tvOS 11.1—a minor update consisting primarily of minor bug fixes and a KRACK vulnerability fix—and watchOS 4.1 today. The latter brings a lot of welcome changes, like the ability to toggle automatic Wi-Fi connections on and off. The watch's preference for Wi-Fi caused connectivity problems for some reviewers and current users who wanted to use their watches while in range of nonfunctional or paid wireless networks.

Promoted Comments

  • I hope this is a misprint, but Apple's security notes say the KRACK vulnerability is only fixed on iPhone 7 and later (also iPad Pro and later). My understanding is that this affected all iPhones/iPads.
    Quote:
    Wi-Fi
    Available for: iPhone 7 and later, and iPad Pro 9.7-inch (early 2016) and later

    Impact: An attacker in Wi-Fi range may force nonce reuse in WPA clients (Key Reinstallation Attacks - KRACK)

    Description: A logic issue existed in the handling of state transitions. This was addressed with improved state management.

    CVE-2017-13080: Mathy Vanhoef of the imec-DistriNet group at KU Leuven

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK