They only got in touch with him because his public statements got huge attention. They should've just contected him and resolved the issue without him needing to go public. And he's not alone in this, other developers expressed the same frustration.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Apologizes to Researcher for Ignoring iOS Vulnerabilities, Says It's 'Still Investigating'
- Thread starter MacRumors
- Start date
- Sort by reaction score
People need to stop being so selfish with IT security. I want Spam to stop. I want DDoS to stop. Zombie systems are the cause of these issues.
Trying the only way I know how to get Apple to realize their mistakes, to get Apple to change, and therefore to get Apple to do something (or maybe anything) to keep me from migrating away. It seems that lovefests don't cause change.Hot take! If that’s how you feel, I don’t understand why you are spending time on an Apple rumor web site
Apple features are geared to teenagers and those that, while they may be older, still think like teenagers. The software Apple delivers is bug ridden and poorly thought out. The walled garden is turning into a prison and expending to macOS. Apple routinely sniffles free speech and forces its own political views on its users.
This is not the stellar high tech company of yesteryears. And yes, I am migrating away from Apple. We now use more PCs (linux) than ever before. On the Macs that we do have we are using Apple software less and less.
What the new Apple does not understand is that one day when the fashion changes, Apple will not have us techies to fall back on because Apple's ecosystem no longer works for us. Increasingly Windows and Linux do.
It's also worth noting that despite you downvoting me, Tokarev themselves has written a blog post saying that the App Store review process will not catch an app using this exploit, and the characterisation in the Macrumours article that he does not think it's a big deal seems... entirely false?
How malware gets into the App Store and why Apple can't stop that
Only after I had published a post detailing three iOS 0-day vulnerabilities and expressing my frustration with Apple Security Bounty Program, I received a reply from Apple: We saw your blog post...
habr.com
Furthermore the security teams at Google are really good at finding and patching security issues.
as opposite to the apple securiy team, which is overridden by the marketing team, the Google team also finds a lot of issues in the apple devices.
the android messup with updates and releases and make it to people devices is another story.
It's also worth noting that despite you downvoting me, Tokarev themselves has written a blog post saying that the App Store review process will not catch an app using this exploit, and the characterisation in the Macrumours article that he does not think it's a big deal seems... entirely false?
How malware gets into the App Store and why Apple can't stop that
Only after I had published a post detailing three iOS 0-day vulnerabilities and expressing my frustration with Apple Security Bounty Program, I received a reply from Apple: We saw your blog post...
If you think MR is falsifying information, better take it up with them. I'm just going by what the article stated.
As for your link, Tokarev states:
However when I read "this" and "this" articles, it seems to me he is completely misrepresenting the review process, so I have to take his entire article with a grain of salt. It comes off as having an agenda rather than scientific.
I do. Exploits can put a lot of people in danger.
Isn‘t it a bit extreme to hold a congress hearing over how a company handles a bug bounty program?
Apple or the Unicode consortium?
Hot take! If that’s how you feel, I don’t understand why you are spending time on an Apple rumor web site
When one of the largest platforms used across the nation may not be timely and robustly handling risks to the information crossing and stored in that platform?
That’s exactly the kind of issue that congressional subcommittees hold hearings on.
I’m surprised I haven’t seen a post here about his other accusations against apples privacy and security- https://habr.com/en/post/580272/
It doesn't help when the world is living thru a pandemic for the past year and a half as well.
Except mathematical principles disagree with you, and say that allowing sideloading destroys the security of even those who do not sideload anything.
But don’t allow the laws of math, cryptography and information theory to get in the way of an entitled complaint.
