4 ms·
It wouldn't be hard for Apple to stick an NDA in to stop these guys from releasing bug info further down the line. Of course, I hope the guys who received the
by iuguy 16y ago
It wouldn't be hard for Apple to stick an NDA in to stop these guys from releasing bug info further down the line.
Of course, I hope the guys who received the CDs are at least getting paid - otherwise I imagine we'll see a few bugs go the other way but some may choose to wait till the final release anyway.
- tptacek 16y agoApple is basically just offering security researchers access to the developer seeding program. The same NDA in place for developers applies to researchers here too: you can't disclose findings until Lion ships (technically, you can't disclose anything you find on a seed at all). This is obviously only fair. If you don't want the NDA, don't take the seed.
- iuguy 16y agoThanks for pointing that out, it makes a lot of sense. It'll be interesting to see whether these guys pony up all the 0day before release or wait until the blackhat/defcon after.