6.0.2 update

Anyone tried todays update? The security fix sounds like it might be something that would break PlexConnect.

 

http://support.apple.com/kb/HT6148

 

Apple TV 6.0.2
  • Apple TV

    Available for: Apple TV 2nd generation and later

    Impact: An attacker with a privileged network position may capture or modify data in sessions protected by SSL/TLS

    Description: Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.

    CVE-ID

    CVE-2014-1266

Ouch, that doesn't look good.

Ouch, that doesn't look good.

Yep, doesn'T look good...  Anyone tried yet ?

No wonder why we jailbreak ios.

Too afraid to try :(

Please update us :)

Can we block the ATV from updating?

Can we block the ATV from updating?

PlexConnect already does that. If you're on 6.0.1 or lower, guessing apple didn't block anything with the control they have without updating it'll work fine ..

Looks like my atv2's just went up in price, again :P

Looks like my atv2's just went up in price, again :P

Pray it won't go up .. :) 

This update is to do with flaws in the SSL implementation, not about self signed certificates so I would be surprised if it breaks anything. If you are wanting to upgrade then just wait for someone with an ATV2 to test (they can always go back).

Intercepting traffic inside an SSL connection is not what Plex Connect is doing. It's actually mimicking the SSL connection, which is very different.

In any event, my Apple TV updated to 6.0.2 and appears fine with Plex Connect.

Updated mine. Works just fine.



Sent from my iPad using Tapatalk

Hey Guys,

The 6.0.2 Update on my aTV3 didn't affect PlexConnect using iMovies certificate.

Are we shooting ourselfs in the foot by doing these update if a JB does surface?

Cheers Rob.

Still working

Tried 2 atv 3 :slight_smile:

as someone said in another post that has some insight from the apple signing methods.. they have left the hijack hole open on purpose.. so i bet they won't stop it until they announce what they will do with apple tv store or apple tv or whats now going on  :)

just a guess

as someone said in another post that has some insight from the apple signing methods.. they have left the hijack hole open on purpose.. so i bet they won't stop it until they announce what they will do with apple tv store or apple tv or whats now going on :)

just a guess


Breaking the use of self signed certs would break a lot of enterprise deployments of ATV's in eg conference rooms ;)

Hi guys,


reading the headline of this post, I was a bit confused because I thought Apple TV 6.0.2 update was released on November 23, 2013. Then I checked my Apple TV 3rd generation and saw an update available. Surprisingly to me, after updating, the same software version 6.0.2 was displayed:
https://miapple.me/plexconnect-running-second-apple-tv-6-0-2-update


I also confirm that PlexConnect is still working on Apple TV 6.0.2. :slight_smile:

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.