4 ms·
> hoard it for yourself or sell it to someone, both of which keep the attack vector open and millions of users at risk. I think this logic is inherently flawed
by willstrafach 9y ago
> hoard it for yourself or sell it to someone, both of which keep the attack vector open and millions of users at risk.
I think this logic is inherently flawed.
If there was no monetary incentive and the only ROI was a thanks from Apple, maybe the bug in question would not have been found in the first place. Becoming aware of a bug does not suddenly put people at any more risk than they were previously in, prior to bug discovery.
- cannabis_sam 9y ago>Becoming aware of a bug does not suddenly put people at any more risk than they were previously in, prior to bug discovery. I agree, which is why I said "keep[s] [...] millions of users at risk" not "puts millions of users at risk". An unfound bug is still a potential zero-day. With something as valuable as an iphone exploit, we know multiple entities are desperately looking for it, so I wouldn't err on the side of assuming that any exploit would not be found. (or put more succintly: If you've found it, someone else might've to)