4 ms·

Software is made by people and people are not perfect. The bigger the project the more moving pieces there are and the more likelihood of flaws. My experience

by selykg 6y ago

Software is made by people and people are not perfect. The bigger the project the more moving pieces there are and the more likelihood of flaws. My experience in bug bounty programs has taught me that if you do start a bug bounty program you need to be serious about it and when a report comes in that is actually serious that you need to act on it quickly. And it seems Apple is doing that. What would be more concerning is if they weren't acting on fixing issues quickly. Some take longer, that's to be expected depending on the problem, but what has been reported so far has been fixed in a timely manner.

intricatedetail 6y ago
This happens when a company choses to amass wealth instead of investing in security. Their ads about privacy now sound laughable
- selykg 6y ago
  Oh please... EVERY SINGLE piece of software has some security issue. Apple is no exception. Assuming they should be perfect is just petty BS and short sighted. Also, keep in mind that security and privacy, while related, are not the same things. You can have privacy (i.e. minimal data gathering) and poor security. You can also have poor privacy but amazing security. Not sure why I'm feeding the troll here but whatever.
  - intricatedetail 6y ago
    Do you mean issues like those found here? It's pretty embarrasing and negligent.
    - selykg 6y ago
      I feel like you’ve never worked at a large company before. None of this is abnormal. And it seems based on this article that Apple responded quickly and fixed the reported issues.
dkonofalski 6y ago
I agree. The bigger lesson here, imo, is that companies need to take security of their tools even if they're only used by a handful of people and not just focus on their front-facing tools. A forum that everyone had access to but that likely didn't get much traffic was used to get access to internal networks. That needs to be taken seriously.

by selykg 6y ago

intricatedetail 6y ago

This happens when a company choses to amass wealth instead of investing in security. Their ads about privacy now sound laughable

selykg 6y ago
Oh please... EVERY SINGLE piece of software has some security issue. Apple is no exception. Assuming they should be perfect is just petty BS and short sighted. Also, keep in mind that security and privacy, while related, are not the same things. You can have privacy (i.e. minimal data gathering) and poor security. You can also have poor privacy but amazing security. Not sure why I'm feeding the troll here but whatever.
- intricatedetail 6y ago
  Do you mean issues like those found here? It's pretty embarrasing and negligent.
  - selykg 6y ago
    I feel like you’ve never worked at a large company before. None of this is abnormal. And it seems based on this article that Apple responded quickly and fixed the reported issues.

dkonofalski 6y ago

I agree. The bigger lesson here, imo, is that companies need to take security of their tools even if they're only used by a handful of people and not just focus on their front-facing tools. A forum that everyone had access to but that likely didn't get much traffic was used to get access to internal networks. That needs to be taken seriously.