Apple Was Apparently Notified About Major FaceTime Eavesdropping Bug Over a Week Ago [Updated]

[Rogifan]

As anybody who has ever filed one will attest Apple often don't immediately respond to bug reports.

And? We still don’t have proof someone at Apple got this and sat on it for a week. She’s not provided any of Apple’s responses and Apple has said next to nothing about. I’ll be perfectly happy to read Apple the riot act if it’s confirmed they sat on this and did nothing for a week.
[doublepost=1548785094][/doublepost]

See above.

Well we know she had at least one response from someone in product security. How about posting his response?

 

[Kabeyun]

FaceTime bug: embarrassing

A week for Apple to address it: pretty good

This 14-year-old’s mommy narrating his demo for him: embarrassing

 

[ksec]

This is not the first time Apple has shown they don't give a damn about user report of security bugs. Log in Password in from last year, and numerous others.

Sad state of Apple.

 

[jarman92]

Well, I guess Apple is just like everyone else, despite all their marketing communique about being all ethical and stuff. "What happens on your iPhone stays on your iPhone" was the recent ad. This scandal is the exact opposite of that.

Or, you know, mistakes happen. Being serious about privacy (which Apple clearly is) and having a software bug aren’t mutually exclusive.

 

[Rob_2811]

And? We still don’t have proof someone at Apple got this and sat on it for a week. She’s not provided any of Apple’s responses and Apple has said next to nothing about. I’ll be perfectly happy to read Apple the riot act if it’s confirmed they sat on this and did nothing for a week.

Well you can't expect her to produce a response in a situation where nobody gets one.

As for being happy to read Apple the riot act, I think someone could produce video footage from last week of her demonstrating this bug for Craig Federighi and you would find some way, however implausible, to refute it.

 

[12vElectronics]

Tim Cook should tender his resignation IMMEDIATELY. No excuses. He needs to go. Along with Cue, Federighi, Ahrendts, Riccio, and ESPECIALLY IVE, HOWARTH, AND ALAN DYE.

Is that how you think it works? People, especially high ranking officials, get fired over issues with a product?

 

[jarman92]

A week ago? It was intentional then. If alerted and didn’t resolve it asap...it was intentional,

Tim (FaceTime bug iPhone recording: it’s okay phill....enhancing our phone price will be amazing...

Intentional?! Give me a break...what possible reason could Apple have for doing this on purpose?

 

[jarman92]

Is that how you think it works? People, especially high ranking officials, get fired over issues with a product?

Also Alan Dye is a designer so not sure how he fits in here lol. Maybe sarcasm?

 

[pat500000]

I wonder if we could eavesdrop what tim says about 1q sales or last year sales. Heh.
[doublepost=1548785445][/doublepost]

Intentional?! Give me a break...what possible reason could Apple have for doing this on purpose?

Intentional. If you don’t act on it, it’s intentional. Meaning they knew but didn’t act on it.

 

[cocky jeremy]

Could she beg for attention a bit more?

 

[jarman92]

It’s hard for some unknown individual to talk about some very important issue with most big corporations.

Was thinking the same thing...this person has no avatar and few following/followers on Twitter; I probably wouldn’t read her tweets either.

 

[Rogifan]

Also Alan Dye is a designer so not sure how he fits in here lol. Maybe sarcasm?

Apparently some will never get over the loss of skeuomorphism.

 

[Jamers99]

This was probably a Gov't requested design feature that was accidentally discovered.

 

[genovelle]

Ok then why did they only disable Group FaceTime yesterday? Seriously, Apple, how many people had their privacy infringed in the last 8 days? Not cool.

Maybe because that was an obscure bug that they were working on actually fixing. The stupidest thing to do is release a video of a bug you don’t have any to get out. What if it required shutting down all calls and messages to prevent it? Something as obscure is not something anyone would be doing. There are bugs in android and others that allowed full access to the device remotely that they knew about for months, not days to patch since changing one thing or another in coding can have a cascading effect. Risk was minimal as long as the obscure procedure they discovered was not made public. I’m sure when they searched server records to determine how often this had been done, it was limited to those two devices. So, the urgency to shut down the entire service for over a billion people was not there yet. Publishing an exploit and promoting it on social media and in the news changes that dynamic.

 

[Chiromac81]

Was thinking the same thing...this person has no avatar and few following/followers on Twitter; I probably wouldn’t read her tweets either.

Am I the only one worried about getting a FaceTime video call hang up from a random contact as well as a FaceTime audio call from a unknown number when I rarely get any FaceTimes at all all year??

Does anyone else think cake during that time might have been suspicious and not random at all?? Especially if they could record for hours...??

 

[jarman92]

I wonder if we could eavesdrop what tim says about 1q sales or last year sales. Heh.
[doublepost=1548785445][/doublepost]
Intentional. If you don’t act on it, it’s intentional. Meaning they knew but didn’t act on it.

That’s not what intentional means...to say this is “intentional” is to say that Apple deliberately created this, or knew about it and decided that it should stay.

All logic points to one of two scenarios: they didn’t know about it because they don’t immediately believe every random woman on social media; or they knew about it, were actively working on a fix for a pretty specific and obscure bug, and didn’t want to announce its existence to the world beforehand.

 

[sracer]

Could she beg for attention a bit more?

She should've just kept it between Apple and herself and trust Apple to do the right thing. amiright?

 

[Haswell]

This is the turning point for me regarding privacy. Apple has lost my trust.

Trust no one.

 

[Rob_2811]

Was thinking the same thing...this person has no avatar and few following/followers on Twitter; I probably wouldn’t read her tweets either.

If she had gotten Kylie Jenner to report it would Apple have actually acknowledged it then?

 

[Rogifan]

Well you can't expect her to produce a response in a situation where nobody gets one.

As for being happy to read Apple the riot act, I think someone could produce video footage from last week of her demonstrating this bug for Craig Federighi and you would find some way, however implausible, to refute it.

I gave you an example of where she got a response. But she cut it off. All we see is Best Regards. So what was that response? Let’s see it. Also let’s see the bug report she filed. Is it something that would have alerted Apple engineers hey this is serious this one needs to go to the top of the pile? Again, I think we need more information before concluding Apple sat on a major bug for a week.

 

[Macintoshrumors]

Yeah, I’m pretty sure reaching out via Twitter is not the best avenue to directly reach Apple, sounds like she wanted EVERYONE to know about her kids discovery to and make a few bucks with the bounty program.
[doublepost=1548785965][/doublepost]

If she had gotten Kylie Jenner to report it would Apple have actually acknowledged it then?

Who?.......... Prob not.

 

[jarman92]

Maybe because that was an obscure bug that they were working on actually fixing. The stupidest thing to do is release a video of a bug you don’t have any to get out. What if it required shutting down all calls and messages to prevent it? Something as obscure is not something anyone would be doing. There are bugs in android and others that allowed full access to the device remotely that they knew about for months, not days to patch since changing one thing or another in coding can have a cascading effect. Risk was minimal as long as the obscure procedure they discovered was not made public. I’m sure when they searched server records to determine how often this had been done, it was limited to those two devices. So, the urgency to shut down the entire service for over a billion people was not there yet. Publishing an exploit and promoting it on social media and in the news changes that dynamic.

Totally agreed. It’s not like this was happening for EVERY FaceTime call...who the hell starts a Group FaceTime and then adds themselves to it?!

 

[pat500000]

This is a week, people. Plus a day for the more fanatically precise. Yes, Apple should have responded right away. However, they would also need to investigate. Give that a day or two.

But we’re dealing with real people. I can imagine some overworked employee not reading it quickly enough. I hardly think Tim reads every communication sent his way and I doubt he was standing over the employees shoulder saying don’t respond.

I would cur some slack if if was one day after nut yeah it was a week.

 

[iapplelove]

Sure you can and I didn't say you couldn't, it just seemed like you took it personally to you.

Ohh no at all it’s all good.

 

[apolloa]

How is this news? Of course Apple knew, that point wasn’t up for debate, I mean this IS Apple, the company who released a firmware update that bricked thousands of devices, and then admitted it actually released the ‘wrong’ update... then again it’s continued to release firmware that’s bricked devices, and then they’ve pulled said firmware, on multiple occasions.

Quality control and bug checks are these days way way way way way way way way way way way low down Apples list of priorities, I frankly consider iOS 12 to be a flipping miracle!!!