4 ms·

Their release pattern with the Apple fault could effectively be called a PR campaign, including a lot of editorial narrative about bad software development proc

Their release pattern with the Apple fault could effectively be called a PR campaign, including a lot of editorial narrative about bad software development processes, etc. This one gets a bug tracker entry. When Project Zero posts a lengthy analysis with lots of scurious claims about the victims of the exploit, the window of exploitation, and narrative about the poor development practices that led to it, then call it even. If it follows the traditional pattern, they'll write a post blaming some external party. No, seriously, when people point out all of the "Android" faults they've found invariably it is some variation of "but it isn't really Google's fault....". Project Zero is brilliant, full of brilliant people, and is a remarkable effort, but when your paycheque is signed off by someone, it is human nature that you're really going to pussyfoot with them.

Thorrez 7y ago
>This one gets a bug tracker entry. For now. A comment from the reporter on the bug tracker entry: >A more detailed explanation of this bug and the methodology to identify it will be written up in a forthcoming blog post when I find the time.
- oefrha 7y ago
  The iOS “deep dive” was a timed media push of a months-old problem right before a major Android release. They didn’t even try to obfuscate the timing or narrative. Blog post or not it’s pretty hard to top that.
  - deleted 7y ago
    [deleted]
  - panpanna 7y ago
    You are paranoid. Apple has started multiple keynotes by talking about Android security issues. Pointing fingers and ridiculing Google, Samsung and others. Then a few weeks later, a Google keynote would demo something on an iPad and praise its beautiful hi-def screen. I have _never_ heard Google officially talk crap about Apple.
    - jsjohnst 7y ago
      > Apple has started multiple keynotes by talking about Android security issues. Historically, they didn’t directly identify other vendors, but strongly implied it so it was obvious to most without directly saying names. This has changed a bit recently and I feel isn’t a good thing. > I have _never_ heard Google officially talk crap about Apple. No offense, but then you aren’t paying attention. There are examples given directly in this thread already.
      - panpanna 7y ago
        > they didn’t directly identify other vendors Who cares when they do this https://essentialapple.com/in-the-news/wwdc-2014-tim-cook-tears-android-a-new-one-video/ https://essentialapple.com/in-the-news/wwdc-2014-tim-cook-te... > examples given directly in this thread Just because someone feels this way it does not make it true. I bet apples own security team are 100% thankful for someone uncovering this.
        jsjohnst 7y ago
        > I bet apples own security team are 100% thankful for someone uncovering this. That’s not my point at all with my original reply. I know first hand that some Apple security members are thankful for the work of ProjectZero. But that isn’t the point I was making or you made previously, Google “not saying anything bad about Apple” is patently false.
        panpanna 7y ago
        What Google did is industry standard, they do it to their own products all the time: https://en.m.wikipedia.org/wiki/Full_disclosure_%28computer_security%29 https://en.m.wikipedia.org/wiki/Full_disclosure_%28computer_...

Thorrez 7y ago

>This one gets a bug tracker entry. For now. A comment from the reporter on the bug tracker entry: >A more detailed explanation of this bug and the methodology to identify it will be written up in a forthcoming blog post when I find the time.

oefrha 7y ago
The iOS “deep dive” was a timed media push of a months-old problem right before a major Android release. They didn’t even try to obfuscate the timing or narrative. Blog post or not it’s pretty hard to top that.
- deleted 7y ago
  [deleted]
- panpanna 7y ago
  You are paranoid. Apple has started multiple keynotes by talking about Android security issues. Pointing fingers and ridiculing Google, Samsung and others. Then a few weeks later, a Google keynote would demo something on an iPad and praise its beautiful hi-def screen. I have _never_ heard Google officially talk crap about Apple.
  - jsjohnst 7y ago
    > Apple has started multiple keynotes by talking about Android security issues. Historically, they didn’t directly identify other vendors, but strongly implied it so it was obvious to most without directly saying names. This has changed a bit recently and I feel isn’t a good thing. > I have _never_ heard Google officially talk crap about Apple. No offense, but then you aren’t paying attention. There are examples given directly in this thread already.
    - panpanna 7y ago
      > they didn’t directly identify other vendors Who cares when they do this https://essentialapple.com/in-the-news/wwdc-2014-tim-cook-tears-android-a-new-one-video/ https://essentialapple.com/in-the-news/wwdc-2014-tim-cook-te... > examples given directly in this thread Just because someone feels this way it does not make it true. I bet apples own security team are 100% thankful for someone uncovering this.
      - jsjohnst 7y ago
        > I bet apples own security team are 100% thankful for someone uncovering this. That’s not my point at all with my original reply. I know first hand that some Apple security members are thankful for the work of ProjectZero. But that isn’t the point I was making or you made previously, Google “not saying anything bad about Apple” is patently false.
        panpanna 7y ago
        What Google did is industry standard, they do it to their own products all the time: https://en.m.wikipedia.org/wiki/Full_disclosure_%28computer_security%29 https://en.m.wikipedia.org/wiki/Full_disclosure_%28computer_...