3 ms·
Apple is right, if you login with an iPhone, or iOS the device is upgraded to not use SMS verification anymore. While the author of the article has found somet
by neximo64 5y ago
Apple is right, if you login with an iPhone, or iOS the device is upgraded to not use SMS verification anymore.
While the author of the article has found something its not anywhere as serious as they think. The second part of the article with the on device based codes vs sms where 29/30 requests didn't work before was most likely that way before they found the vulnerability.
It is upsetting not to get the $100k but the post comes off a bit as a lash out against that.
- Anunayj 5y agoI agree. This is a sorry situation to see, and neither of parties seem correct here. $18k is seems a little lowballing for a vulnerability that does actually work on a subset of iCloud accounts. and provides a method to bypass 2FA. At the same time the person lashing at Apple for handling seems quite unprofessional. In a perfect world a issue like this would be solved with better communication by both parties.