4 ms·
I don't know how Apple's servers security fares now, but I took a quick look 4 years ago and it was notoriously bad. They were responsive and solved the exploit
by tetheno 11y ago
I don't know how Apple's servers security fares now, but I took a quick look 4 years ago and it was notoriously bad. They were responsive and solved the exploitable bugs soon after I notified them. No bounties though.
If their software and network security is similar now.. then they should spend resources there rather than care too much about modified hardware by a governmental agency.
- hrktb 11y agoWouldn't it be completely separate teams ? I can't imagine the hardware team's efforts taking away engineers from teams handling software security.
- mc32 11y agoAn issue at very large companies like Apple is that while they can be superb in one area or in one core product does not translate into being adept in other areas under different teams with different management styles, demands budgets, etc. So unless Apple are going to put their best and poach other industry bests, their result will likely not deliver on premise or promise.
- lostlogin 11y agoJudging by their rhetoric and their recent win (can it be called that?), there is certainly widespread interest in them locking themselves down. They would look a little foolish if not.
- tetheno 11y agoCertainly they are different teams. My comment just meant that I needed 1 hour to find a way to get a shell in a couple of their servers. That is more worrisome to me than the NSA snooping around. And I'm not a great pentester, I probably wouldn't find a bug in Google even if I spent a couple weeks.
- ryao 11y agoThey are HP built Intel systems running Linux.