4 ms·

> Is there any historical evidence that high-severity bugs in iPhones (or really any mobile phone) are reputationally damaging, sufficiently that Apple would wo

> Is there any historical evidence that high-severity bugs in iPhones (or really any mobile phone) are reputationally damaging, sufficiently that Apple would worry about the impact of this bug? I'm sure Apple "worries" about any bug and its potential impact on its reputation, particularly in the area of privacy, where it has a leg up on Android at least in perception. That said, what historical bug is up to this one for iOS? This is a big deal and I cannot recall anything similar. edit 1: this hasn't exactly been a banner couple of months for iPhone. You'd expect that mitigating any negative news about the device would be paramount edit 2: look to Facebook. I find it encouraging that people have reacted so negatively to a company acting so cavalier with their personal data and privacy. Yes, I think Apple cares, moreso than with other bugs.

akerl_ 8y ago
https://www.zdnet.com/article/ios-mac-flaw-exposes-your-password-with-one-image-file/ https://www.zdnet.com/article/ios-mac-flaw-exposes-your-pass... Where sending somebody a .tiff file via iMessage, web page, or email would give the attacker RCE on the device.
- saagarjha 8y ago
  The article slug is misleading, and suggests a fundamental misunderstanding of the scope of the bug. A RCE in Messages does not allow attackers to steal your passwords.
  - akerl_ 8y ago
    The ask from the comment I’m responding to was for comparable vulnerabilities to this one, since this comment thread is discussing reputational damage from high-sev vulnerabilities. This vuln gives RCE in iMessage, which is an app that has microphone/camera access, so I’d say it’s clearly comparable.
- nkozyra 8y ago
  Unless I'm missing something this was patched before it was publicly announced. I also don't think it had the impact you're suggesting, nor would it be as immediately palatable as a privacy issue to the layperson.

akerl_ 8y ago

https://www.zdnet.com/article/ios-mac-flaw-exposes-your-password-with-one-image-file/ https://www.zdnet.com/article/ios-mac-flaw-exposes-your-pass... Where sending somebody a .tiff file via iMessage, web page, or email would give the attacker RCE on the device.

saagarjha 8y ago
The article slug is misleading, and suggests a fundamental misunderstanding of the scope of the bug. A RCE in Messages does not allow attackers to steal your passwords.
- akerl_ 8y ago
  The ask from the comment I’m responding to was for comparable vulnerabilities to this one, since this comment thread is discussing reputational damage from high-sev vulnerabilities. This vuln gives RCE in iMessage, which is an app that has microphone/camera access, so I’d say it’s clearly comparable.
nkozyra 8y ago
Unless I'm missing something this was patched before it was publicly announced. I also don't think it had the impact you're suggesting, nor would it be as immediately palatable as a privacy issue to the layperson.