Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

bleepingcomputer.com

Post reply on HN
Print view View original

11–20 of 254 posts

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#11

Post by jjcon »

ballenf wrote: post #7

Here's a fun conspiracy theory proposed entirely in jest: Apple doesn't want to patch zero-days used by US authorities in order to alleviate pressure on its encryption practices. So they really only want to fix zero-days that are known broadly or get media attention. And they don't want to give too much incentive to researchers to report zero-days to Apple instead of selling them to the highest bidder (which may ulti…

> alleviate pressure on its encryption practices.

Apple is not that different from the status quo on end to end encryption as to necessitate a conspiracy (probably even in jest ). They have no icloud encryption, no photos encryption, no device backup encryption etc etc.

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#13

Post by watermelon0 »

artful-hacker wrote: post #9

This is just one more nail in the already air-tight coffin Apple has built for themselves. I seriously don't understand why people stick with Apple products, they are getting much harder to use, they lock you in to their gimped ecosystem, and their hardware is constantly failing to be reliable.

There is no better alternative (at least for some people)?

Just some examples:

- Integration between their devices cannot be matched by others

- Apple Watch has the largest app collection, great integration between iOS and Watch apps, smooth animations/UX, the most accurate GPS of smart watches

- Handover of AirPods between Apple devices is a lot better than with other Bluetooth headphones

- (subjective) iOS has a lot better UX/animations than Android

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#15

Post by rlt »

ballenf wrote: post #7

Here's a fun conspiracy theory proposed entirely in jest: Apple doesn't want to patch zero-days used by US authorities in order to alleviate pressure on its encryption practices. So they really only want to fix zero-days that are known broadly or get media attention. And they don't want to give too much incentive to researchers to report zero-days to Apple instead of selling them to the highest bidder (which may ulti…

Next level conspiracy theory: Apple employs, knowingly or unknowingly, CIA/NSA agents who intentionally introduce these bugs.

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#16

Post by ballenf »

jjcon wrote: post #11
ballenf wrote: post #7

Here's a fun conspiracy theory proposed entirely in jest: Apple doesn't want to patch zero-days used by US authorities in order to alleviate pressure on its encryption practices. So they really only want to fix zero-days that are known broadly or get media attention. And they don't want to give too much incentive to researchers to report zero-days to Apple instead of selling them to the highest bidder (which may ulti…

> alleviate pressure on its encryption practices. Apple is not that different from the status quo on end to end encryption as to necessitate a conspiracy (probably even in jest ). They have no icloud encryption, no photos encryption, no device backup encryption etc etc.

Would that still apply if a target has iCloud backup turned off?

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#18

Post by _jal »

woliveirajr wrote: post #2

Seems that no credit, no bount, nothing, has become the way that Apple deals with the iBugs Hunters. And all it takes is one of those unsong heros giving up on reporting to Apple and, instead, reporting to some 0-day company, and some ransonware go brrrr

I'm sure people are selling them, although I think it would only become public by accident.

At least some are going the back to the Full Disclosure days...

https://twitter.com/jonathandata1/status/1448037463419674625

Re: Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

#19

Post by ambientenv »

post_break wrote: post #8

What a slap in the face. This guy is owed a boatload of cash, and typical Apple just kicks the can down the road. Next time I hope he sells his next vuln to the highest bidder.

> Next time I hope he sells his next vuln to the highest bidder

And thereby accomplishing what, exactly? There is still merit, albeit not from a material wealth standpoint, for doing the right thing for the right reasons.

Post reply on HN