5 ms·
Google has long been Apple's security division. Often I wonder if Apple has any security people at all. The last Safari update had 11 CVEs from Google. Most
by arubberduck 9y ago
Google has long been Apple's security division. Often I wonder if Apple has any security people at all. The last Safari update had 11 CVEs from Google. Most of Apple's updates credit one or more issues to Google, and often Apple credits OSS-Fuzz, which is also a Google project.
- sigmar 9y ago>Often I wonder if Apple has any security people at all. It just feels like they don't since they don't let their security people have social media presences. For example, their recent hire Jonathan Zdziarski
- saagarjha 9y agoIt looks like you were cut off there…
- NamTaf 9y agoNo, reread it as "For example, [consider] their recent hire Jonathan Zdziarski[, whom you'll see is a leading iOS security researcher from a cursory Google search]" The GP just omitted a bunch of implied statement, which isn't immediately obvious especially if you don't natively speak English.
- giancarlostoro 9y agoHe forgot a period at the end, so it does look like he got cut off potentially.
- forgot-my-pw 9y agoSecurity Update 2017-001 was released November 29, 2017: https://support.apple.com/en-ca/HT208315 https://support.apple.com/en-ca/HT208315 Does it mean it's the first security update of the year? :(
- dep_b 9y agoNo, just for this OS
- forgot-my-pw 9y agoHigh Sierra was released in June 2017. So that's still 6+ months without security patches. Not sure if that's a great track record or poor patching planning?
- dep_b 9y agoYou don't credit internal employees in this way. These bugs were reported through official channels.