This is as bad as it gets. A stupid coding error that has gone unnoticed for quite some time leaves all Apple iOS devices open to spoofing. In other words you only think you have a secure connection, the reality is that you don't! Full details here: http://arstechnica.com/security/2014/02/extremely-critical-crypto-flaw-in-ios-may-also-affect-fully-patched-macs/ The coding error is juvenile. With open source loads of people would have noticed this straight away. Apple's super secrecy about everything means no one gets to see the source code, and so invites this sort of blunder. Visiting this link with a secure browser will show an error and warning messages. Reportedly iOS devices don't, and allow sites to pretend to be what they are not. But the problem doesn't stop there!