Researcher Gives Apple Details of macOS Keychain Security Flaw Despite No Mac Bug Bounty Program

[YaBe]

No he wasn’t. Holding it back, leaving people vulnerable isn’t the right thing to do

I think it is Apple who left people vulnerable, while selling the mantra "We care about your data".

Kudos to him as he could have done lots of damage, while he just showed he cares about the platform more than Apple does.

He was doing the right thing all along, at least to my eyes.

 

[Mydel]

They are not obligated to.

It sounds like extortion to me.

It would be nice, but really? It just sounds like he did it for money, otherwise he would not care for any bounty. Seems like he changed his idea. I mean, he has a Mac that runs Mojave. Not a poor kid.

be serious...what extortion? he could easily sell that bug on a free market if he wanted. And no matter if you poor or not you should get payed for something that you did if it has value.

 

[alexhardaker]

I think it is Apple who left people vulnerable, while selling the mantra "We care about your data".

Kudos to him as he could have done lots of damage, while he just showed he cares about the platform more than Apple does.

He was doing the right thing all along, at least to my eyes.

Software bugs happen. No software is perfect. It’s good he did the right thing and told Apple about this issue

 

[loby]

I know you’re being facetious, but that’s just it, Apple has plenty of money and likely resources where they could implement a program that would help eradicate issues, but for whatever reason, they don’t want extend a hand. There’s no logical reason why they won’t implement a bounty hunting program.

No...I am serious.

Tim complained about lowering the price of replacing batteries on iPhones last year to cover in hopes to beat lawyers to the punch while they were in a lawsuit (try to prevent another) and then blamed loses on lowering battery replacements from $79 to $29 (among a few other things) a few months ago.

bean counting mentality. That is how he is built (and trained). No joke, this is true.

 

[MacBH928]

If this will happen, be prepared for another couple of years been throwing back in time. I’ve experienced two transitions already and it will take years to give the OS the same functionality as from the platform it came from.

other than PowerPC->Intel... what was the other transition?

 

[skinned66]

Pay the guy. He could make this whole thing public and he's not. He could sell this bug to ne'erdowells and he's not. If you want me to pay for a headphone dongle this guy isn't asking too much for his time.

Good on him.

 

[chrfr]

other than PowerPC->Intel... what was the other transition?

Motorola 68k to PowerPC.

 

[9081094]

other than PowerPC->Intel... what was the other transition?

6800 Motorola to powerpc