3 ms·
Yes, the manner of disclosure reflects the respect one has for the software vendor. https://twitter.com/mholt6/status/935687749381775362 https://twitter.com/mho
by mholt 9y ago
Yes, the manner of disclosure reflects the respect one has for the software vendor. https://twitter.com/mholt6/status/935687749381775362 https://twitter.com/mholt6/status/935687749381775362
Responsible disclosure is more or less earned as your resources go to infinity.
- TaylorAlexander 9y agoAn interesting comment given that Apple as closer to infinity resources than anyone else.
- drewmol 9y agoIndeed, infinitesimally closer ;-)
- jethro_tell 9y agoThis stuff is so amateur though I don't think it is being discovered and handled by security guys. It's just some dev that is annoyed that the lock screen doesn't have total focus which is annoying and insecure and the kid of shit you'd see in the 90s
- gaius 9y agoWho can respect a vendor that assigns engineers to work on the animated poop icon instead of basic security?
- vhost- 9y agocontrary to what you may believe, some people need to work on content and should not be touching security. it's absurd to expect apple to fire all their non-security related staff and replace them with a whole organization of engineers that only work on basic security. I do agree that apple has had a ton of problems in this area and needs to work on it, but this example is very played out and boring.
- EpicEng 9y agoYes because I'm sure those same people are also able to work on security.
- gaius 9y agoSomeone made the decision, this year we will hire X number of security engineers and Y number of poop animators. Ultimately that guy is Tim Cook.
- deleted 9y ago[deleted]
- daveFNbuck 9y agoYou can't just hire arbitrary numbers of security engineers. These positions are difficult to fill. There's a good chance that Tim Cook wanted to hire more security engineers than was possible.