4 ms·

> Oh, wow - I've reported this problem along with na example exploit to Apple about 6-7 years ago Any proofs? Perhaps you can demand a bounty payout or sue the

• eridius 9y ago
  You can't demand a bug bounty payout, especially because Apple didn't have a bug bounty back then (and their bug bounty today is invite-only). Also, if you read the rest of the comment, Apple didn't ignore it. They fixed it.
  • yeukhon 9y ago
    I did read the rest of the comment. So I am asking if someone is either making this up or if not it's important to shame Apple for its secrecy. That's my view on responsible disclosure; either ack someone's hard work or let every bug free in the wild. What's the point when your work isn't being acked?
    • eridius 9y ago
      > What's the point when your work isn't being acked? To get the bugs fixed? Also, we don't know why they didn't get recognition. The simplest answer is someone else may have reported it first. But it doesn't really matter. And I really don't see how "secrecy" comes into play here.
• tachion 9y ago
  Proofs of what? My story? Don't feel like I need to provide any. Proofs again Apple in lawsuit you're suggesting? I'm not an American, so suing everyone for everything is not really in my custom ;) Rather than them paying me anything after being dragged to court (and I doubt I'd have any chance given disparity between their legal resources and mine) I'd like to get an acknowledgement tied to my name, but I was told not only they don't do that, but also they can't and won't tell me wether I was right and I've found a real security bug. Steve Jobs era secrecy in all its glory.