3 ms·
I'm still wondering if the Find My iPhone brute force bug was exploited. Why doesn't Apple at least offer a bug bounty reward? Is it irresponsible that they do
by fjarlq 12y ago
I'm still wondering if the Find My iPhone brute force bug was exploited.
Why doesn't Apple at least offer a bug bounty reward? Is it irresponsible that they don't?
All they offer now, as far as I have found, is a mention on this web page:
http://support.apple.com/kb/HT1318 http://support.apple.com/kb/HT1318
And, does the fact that this bug made it into production suggest a lack of internal security audits at Apple?
- kennywinker 12y agoThey specifically mention "Find My iPhone" as NOT the source. I'm not sure if you missed that bit, or you are you saying you don't believe them?
- fjarlq 12y agoThe way they worded it can be interpreted to mean that it is still a possibility that the Find My iPhone bug was involved. And anyway, I'm still wondering if it was exploited in this celeb pic scandal or other breaches we haven't heard about yet, so I still have those questions.