4 ms·
It kind of just enforces the idea that security by obscurity isn't sufficient; ideally even despite deep knowledge of the internals, it should still be secure.
by setr 9y ago
It kind of just enforces the idea that security by obscurity isn't sufficient; ideally even despite deep knowledge of the internals, it should still be secure.
What would be sleazy though is if he deliberately discovered a bug and didn't report it to apple while working there, and then took it with him to this job.
But if he simply made use of his general knowledge of the system for more effective pentesting, I think its pretty much fair, and expected
- etatoby 9y agoNo, what would be really sleazy is if he deliberately planted a bug in a hard to find place in order to quit and start his own business.
- votepaunchy 9y agoNot just sleazy but also illegal. And subject to discovery in an Apple lawsuit.