3 ms·
I'm guessing that the research iPhones were given to a very select group of security researchers with track records of reporting important vulnerabilities under
by snazz 6y ago
I'm guessing that the research iPhones were given to a very select group of security researchers with track records of reporting important vulnerabilities under some kind of NDA.
- saagarjha 6y ago1. Still never heard of anyone getting them and 2. that’s worse than useless.
- snazz 6y agoOh, for sure. I should clarify that I meant that they received the iPhones under an NDA, not that they reported bugs under an NDA (aside from the 90-day disclosure to get any bounties).
- saagarjha 6y agoWord on the street suggests they don’t exist: https://twitter.com/thegrugq/status/1236264193906495488 https://twitter.com/thegrugq/status/1236264193906495488
- snazz 6y agoI guess it's unrealistic to assume that their supply chain would be secure enough for these that no one would have heard anything.
- saagarjha 6y agoRight. You can find pictures of actual internal devices all over the internet (supposedly some people will even sell them to you), so it's quite strange to not hear anything about these. With Apple going after Corellium, I think many researchers are thankful for the various exploits we've had recently that have kept iPhone open.
- phamilton 6y agoI'm fine with pre-release bugs being reported under an NDA. If pre-release bugs are publicly disclosed that is arguably a punishment for companies who seek that validation early in the cycle rather than later.