4 ms·

You say you submitted it to the ZDI, but did you try sending it to Apple product security?

• Siguza 9y ago
  No, their bug bounty only extends to iOS.
  • eridius 9y ago
    Doesn't mean you can't email product-security@apple.com with your bug anyway.
    • dmitrygr 9y ago
      Why, if they clearly place no [monetary] value on security of OSX?
  • yeukhon 9y ago
    I suggest contact Google's Project Zero. I think those guys would love to help you...