2 ms·

Stuff like gotofail took a while to get patched (weeks?), and things like https://github.com/kpwn/tpwn https://github.com/kpwn/tpwn has been around for a while

by 0x0 11y ago

Stuff like gotofail took a while to get patched (weeks?), and things like https://github.com/kpwn/tpwn https://github.com/kpwn/tpwn has been around for a while which is still not patched in any public, non-beta release of OSX.

donut2d 11y ago
While it's definitely plausible, and probably likely, I was looking for a source to the specific statement that Apple is "voluntarily giving the NSA zero-day vulnerabilities months before they get fixed". Are they giving them to the NSA? Is this why they're holding out on fixing them? Do we have evidence that this is their intention?