He didn't do anything harmful though. He just demonstrated the capability. It's the equivalent of making a word document pop up calc.exe. This proves that you'

He didn't do anything harmful though. He just demonstrated the capability. It's the equivalent of making a word document pop up calc.exe. This proves that you've broken the security, but doesn't cause harm. You have to actually do it to be taken seriously, especially with unreceptive vendors like Apple. There is really no reason to behave in a hostile way towards a researcher that does this. He's telling you about the problem. In the security industry, there are many people who seek and find vulnerabilities. Some of them report them, and some of them keep them private and exploit them secretly to attack people's property, or privately sell to others who do the same. Selling these to the underground is big business now. Let's subtract the people who report things from the above equation (because we ban and vilify them). Now what does your ecosystem look like? Dumb move, Apple. Dumb move.