3 ms·
Its not about security and privacy, its about obscurity and PR. Corellium is heavily used by security researchers, killing it will reduce the number of bugs th
by pr0zac 7y ago
Its not about security and privacy, its about obscurity and PR.
Corellium is heavily used by security researchers, killing it will reduce the number of bugs that are found in iOS and make the platform less secure overall.
Apple wants to project the appearance they have minimal security flaws and they accomplish this largely by making security research more difficult to perform.
I'm also confused why you seem to think security researchers don't deserve to get paid for their work. Bug bounties have been around for a while now for a reason.
- panpanna 7y agoApple has always been hostile towards traditional security researchers (remember how they harassed the guys behind the wifi remote exploit?) Which is why the $1m announcement was an odd move and done people on HN consider it just a PR thing.
- fragmede 7y agoNot GP poster but the contradiction is Apple (wants to be) serious about security. Thus, Apple will pay for (certain kinds of) bugs. Corellium is used to find bugs. Apple is trying to shut down Corellium. This move by Apple seems to contradict the notion that Apple is serious about security - how are researchers supposed to find bugs without this?(a successful lawsuit would also set precedent that no US entity could run a very similar service) Sure, there's workarounds (eg buy a pile of iPhones), but why is Apple making it harder to secure their product?