6 ms·
Apple hasn’t responded to responsible disclosure for 2 years?
by leifg 5y ago
Apple hasn’t responded to responsible disclosure for 2 years?
- ProAm 5y agoThey do not earn 30% on security issues.
- jqpabc123 5y agoExactly! And for the same reason, they don't spend much time scanning apps in their app store either. https://www.forbes.com/sites/kateoflahertyuk/2019/01/07/these-14-apple-apps-could-pose-a-big-security-risk/?sh=4a1af54bcd6e https://www.forbes.com/sites/kateoflahertyuk/2019/01/07/thes...
- zepto 5y agoDo you think they think that bad publicity is good for their reputation?
- jqpabc123 5y agoRepeated incidents of malware doesn't seem to have hurt them much yet so until it does, don't expect them to look too closely at apps in their store. https://techcrunch.com/2020/08/31/apple-notarized-mac-malware/ https://techcrunch.com/2020/08/31/apple-notarized-mac-malwar...
- zepto 5y agoWhat makes you think it hasn’t hurt them? Pretty much every post on HN is filled with comment like this. Clearly their reputation amongst developers has suffered.
- jqpabc123 5y agoIt obviously hasn't hurt enough for them to do better at scanning.
- zepto 5y agoHow do you you know? Perhaps it’s a hard problem that is just taking time to solve.
- jqpabc123 5y agoBecause other people keep finding stuff they missed --- and they aren't getting a 30% cut of all revenue from the store. At what point do you start to accept that the store might just be a monopoly control gateway and revenue source?
- zepto 5y ago> Because other people keep finding stuff they missed Apple has approximately 150,000 employees in total, but more than 1,000,000,000 customers, and more than 23,000,000 registered developers. Of course a few things will be missed and found by customers. Given the numbers it looks like they are doing a pretty good job. It makes no sense to imagine that they are deliberately allowing apps into the store.
- kristofferR 5y agoIt's not really responsible disclosure if the security flaw isn't made public within at maximum 90 days.