Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

bleepingcomputer.com

Post reply on HN
Print view View original

1–10 of 254 posts

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#2

Post by woliveirajr »

Seems that no credit, no bount, nothing, has become the way that Apple deals with the iBugs Hunters.

And all it takes is one of those unsong heros giving up on reporting to Apple and, instead, reporting to some 0-day company, and some ransonware go brrrr

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#3

Post by kamilman0 »

Could it be that maybe they try to uphold the reputation of Apple by doing so? But it doesn't make sens either way because they could have just paid those guys and then everyone is happy. That's just some ass-backwards logic. I am an Apple fan and I'm not going to defend this. It's just plain bad behavior on their side.

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#5

Post by croutonwagon »

woliveirajr wrote: post #2

Seems that no credit, no bount, nothing, has become the way that Apple deals with the iBugs Hunters. And all it takes is one of those unsong heros giving up on reporting to Apple and, instead, reporting to some 0-day company, and some ransonware go brrrr

I'm surprised it hasnt happened yet. IT seems apple is possibly openly hostile and uses "red tape" as an excuse to obfuscate communication and frustrate those trying to do right by them instead of just posting it to github and calling them out on twitter.

Its one of a few reasons I have made some in-roads into moving off the platform.

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#7

Post by ballenf »

Here's a fun conspiracy theory proposed entirely in jest:

Apple doesn't want to patch zero-days used by US authorities in order to alleviate pressure on its encryption practices.

So they really only want to fix zero-days that are known broadly or get media attention. And they don't want to give too much incentive to researchers to report zero-days to Apple instead of selling them to the highest bidder (which may ultimately be the largest governments with the greatest ability to regulate Apple).

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#9

Post by artful-hacker »

This is just one more nail in the already air-tight coffin Apple has built for themselves. I seriously don't understand why people stick with Apple products, they are getting much harder to use, they lock you in to their gimped ecosystem, and their hardware is constantly failing to be reliable.

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#10

Post by radlad »

artful-hacker wrote: post #9

This is just one more nail in the already air-tight coffin Apple has built for themselves. I seriously don't understand why people stick with Apple products, they are getting much harder to use, they lock you in to their gimped ecosystem, and their hardware is constantly failing to be reliable.

I'm so happy Linux is an option on the computer.

When it comes to phones I feel stuck behind a rock and a hard place - choose iPhone, with poor Linux integration and threats to passively scan files on my phone and forward them to LEO? Sure, they have a decent record with security but these bug bounty reports haven't been great.

Or choose Android, with its poor privacy record, a result of being built by an ad company that's already scanning my phone and mining it for data?

edited to add - While I'd love to see a true competitor in this space (i.e. not based on Android - those projects don't seem to work out well as a result of being half-in/half-out of the ecosystem) I don't see how it's possible without the support of the large tech players - Facebook, Instagram, Snapchat, WhatsApp, Twitter, and Spotify at minimum, to say nothing of the long tail.

Post reply on HN