5 ms·

I think this incorrectly interprets my comment. I am not defending apple or blaming the individual that disclosed the vulnerability on Twitter. I am simply poin

I think this incorrectly interprets my comment. I am not defending apple or blaming the individual that disclosed the vulnerability on Twitter. I am simply pointing out that putting users at additional risk because you want to see Apple hurt may be misguided. We have responsible disclosures in place for a reason. EDIT: putting users at _additional_ risk

philipwhiuk 9y ago
They were already at risk.
- mark-r 9y ago
  Making an exploit widely known increases the risk dramatically.
  - testvox 9y ago
    No... I immediately set a root password, if this had not been posted I would be far more at risk.
    - mark-r 9y ago
      Maybe you personally are at less risk, but the population as a whole is at greater risk.
      - patcheudor 9y ago
        I'm now seeing cases of non technical people trying this because they heard about it and it's easy. To them, it just unlocks some system preferences thing. Guess what those people are not doing after they try it? 'passwd root' to change the password because in many cases they don't even know what the terminal is. In this particular case, the ease of validation additionally works against users.
sydney6 9y ago
I dont understand the implied correlation between, what you call, irresponsible disclosure and "wanting to hurt apple". Where did you get this impression from? edit: Typo.
- xapata 9y ago
  > Let's hope Apple gets sued ...
  - sydney6 9y ago
    Thanks, you are right. If he refers this post (which i believe he does), he is indeed right. Anyhow, personally i wouldn't exclude something like this, e.g. suing, as a last resort. Anything that changes apples attitude towards security or at the very least, enhancing the value of security as a product qualifier.
    - deleted 9y ago
      [deleted]
- deleted 9y ago
  [deleted]
threatofrain 9y ago
I do get the impression that you do blame the individual, as you have attributed unsavory motivations to his behavior. Why do you care to make such a loose statement about this person having a petty motive of malice?
- blowski 9y ago
  One of the grandparent posts specifically said they supported the tweet because it would hurt Apple, and I think bradrydzewski is responding to those comments.
  - deleted 9y ago
    [deleted]

philipwhiuk 9y ago

They were already at risk.

mark-r 9y ago
Making an exploit widely known increases the risk dramatically.
- testvox 9y ago
  No... I immediately set a root password, if this had not been posted I would be far more at risk.
  - mark-r 9y ago
    Maybe you personally are at less risk, but the population as a whole is at greater risk.
    - patcheudor 9y ago
      I'm now seeing cases of non technical people trying this because they heard about it and it's easy. To them, it just unlocks some system preferences thing. Guess what those people are not doing after they try it? 'passwd root' to change the password because in many cases they don't even know what the terminal is. In this particular case, the ease of validation additionally works against users.

sydney6 9y ago

I dont understand the implied correlation between, what you call, irresponsible disclosure and "wanting to hurt apple". Where did you get this impression from? edit: Typo.

xapata 9y ago
> Let's hope Apple gets sued ...
- sydney6 9y ago
  Thanks, you are right. If he refers this post (which i believe he does), he is indeed right. Anyhow, personally i wouldn't exclude something like this, e.g. suing, as a last resort. Anything that changes apples attitude towards security or at the very least, enhancing the value of security as a product qualifier.
  - deleted 9y ago
    [deleted]
deleted 9y ago
[deleted]

threatofrain 9y ago

I do get the impression that you do blame the individual, as you have attributed unsavory motivations to his behavior. Why do you care to make such a loose statement about this person having a petty motive of malice?

blowski 9y ago
One of the grandparent posts specifically said they supported the tweet because it would hurt Apple, and I think bradrydzewski is responding to those comments.
- deleted 9y ago
  [deleted]