3 ms·

I suspect he shouldn't have even said this much, before the agreed-upon full-disclosure date.

• bsaul 12y ago
  Completely agree. Just saying that a vulnerability exists is a big thing, because it motivates hackers to search for it. I seriously doubt it will take more than until january for another personn to find it.
  • oneeyedpigeon 12y ago
    So Apple have known about this for a few days, at least. If it's as serious as it sounds, they'll hopefully have a patch v. soon, if not already; when was the latest security patch for 10.10?
  • zyx321 12y ago
    Especially since he narrowed it down so much. Gaining a root shell by piping something into sudo that causes it to skip asking for a password? That's what I took away from the article, and it certainly sounds like a plausible attack vector. Scary stuff!