3 ms·
The basic principle of modern security is that a secure system must be secure even if an attacker knows all aspects of the system’s design. This is what warning
by mikeash 8y ago
The basic principle of modern security is that a secure system must be secure even if an attacker knows all aspects of the system’s design. This is what warnings against “security by obscurity” are referring to.
The only ethical breach I see here would be if they deliberately weakened the system so that they could break it later, which seems unlikely.
- londons_explore 8y agoSomeone smart in this position would 'accidentally forget' to document and fix a bug he/she discovers while scouring the source code. Then leave Apple and join another company and proceed to 'rediscover' it.
- dev_dull 8y agoThen they fix the bug and his leverage disappears.