4 ms·
This involves an interesting set of assumptions about the plausibility of deep-cover hacking operations. > If you use the SRD to find, test, validate, verify,
by ebg13 6y ago
This involves an interesting set of assumptions about the plausibility of deep-cover hacking operations.
> If you use the SRD to find, test, validate, verify, or confirm a vulnerability, you must promptly report it to Apple
But let's say you pass their review, get a device, find a vulnerability, and don't report it. Then what? You're breaching the contract, but they have no way to know that, so there's no consequence?
- saagarjha 6y agoI would expect that if you put up jailbreakmeios14.com and they find you have one of these devices, they will remove you from the program.
- ebg13 6y agoYes, but most exploits are deployed in secret by malicious groups trying to hack your shit and steal your money/identity/whatever, not publicized on consumer-facing websites with your name attached.
- mschuster91 6y agoIt's like with Al Capone and the taxman: at least Apple that way has an angle of legal attack against shady companies (Hacking Team, Finfisher, ...).