No, CVE-2014-1266 is 10.9 and 10.9.1 only. You're right about it also applying to iOS 6, but that's what the person you're replying to already said.

There's no contradiction there. You are running a seed of 10.9.2, not 10.9.2.

I'm more curious if Apple will put out a fix BEFORE 10.9.2 ships; rumours still peg 10.9.2. a few weeks away.

The source is available; how does "security through obscurity" apply at all?

Um, sure there is. Search for SSLHashSHA1.update; it's in the second group of them.

10.7 probably isn't vulnerable, as it predates iOS 5 (which doesn't have this flaw).

If 10.8 is vulnerable, the suggested upgrade would be 10.9.3 anyway. (10.9 has the same requirements as 10.8, and is a free upgrade.)

I would like to see an article that explains which versions are vulnerable, however.

This is a fascinating problem. I can see the feature being incredibly valuable, yet awful as it's currently implemented. Is there an approach to doing this safely?

Yes. Won't someone think of the small developers?

Like Samsung.

-- A small developer.

And a bad month for Samsung.

Perhaps they are. It is remarkably difficult to secure a large code base.

Though I would hope that NFC is new enough that it would be coded securely right from the start.

Use Sun's site to check:
http://java.com/en/download/testjava.jsp

I doubt it's still installed after an upgrade, though.

Given that the virus no longer exists outside of labs, vaccinating everyone for it at a cost of 300-600 lives is very significant.

I know I don't. Are you sure Google doesn't?

If everyone in the US received the smallpox vaccine, 300-600 people would die. That's not insignificant.

WebP lossy may not catch on, but it isn't pointless. Compared to JPEG, in return for a muddier image (to my eyes, at least) you get alpha support. As Google is one of the biggest distributors of images on the Internet, I think the real purpose is to pay less for licensing JPEG.

WebP lossless seems much less useful to me. Unless there's licensing issues I'm not aware of, it seems pretty pointless.

Because the current smallpox vaccine can kill. Not many, sure, but if you try to apply it to an entire population? Some people are going to die.