News for hackers. Stuff that matters.
Re:Cloak and dagger – a new kind of attacks for Android by sgift on Wednesday May 24, 2017 @06:47PM (#14414039)
> If you as a security researcher reasonably believe the vendor has neglected to patch the vulnerability, and you release exploit details, you are amplifying the current harm it's inflicting.

At least the public now has a fair chance to evaluate if they want to use their devices despite this vulnerabilities.

Re:Cloak and dagger – a new kind of attacks for Android by etjossem on Wednesday May 24, 2017 @06:51PM (#14414060)
That's true, but it glibly ignores the reality of vendor lock-in. The average non-infosec human is not going to switch devices because of a vulnerability whitepaper. This "vuln-insensitive user" is better served by giving the vendor a longer timeline to take care of the issue, rather than releasing exploit details two weeks after someone changed a status on a ticket.
Re:Cloak and dagger – a new kind of attacks for Android by AstralStorm on Thursday May 25, 2017 @09:39AM (#14417191)
Then fight the lock-in, in court if necessary. Tort lawyer will have some fun with it if you can show you cannot evade losses of secure data.

I am pretty sure the line of defence will be weak "no warranty" claim that has nothing to do with lock in.

Re:Cloak and dagger – a new kind of attacks for Android by chipperyman573 on Wednesday May 24, 2017 @09:26PM (#14414711)
I feel that this rebuttle is silly. Nobody outside HN (and similar) will understand what this means. And, even if they do, many users cannot afford to buy an iPhone (the only real competition) just because of one security flaw that might affect them. Even then, the opportunity cost of switching is not minimal.
Re:Cloak and dagger – a new kind of attacks for Android by ocdtrekkie on Wednesday May 24, 2017 @11:11PM (#14415060)
The fact that the only competition is unaffordable to a product with 85% global market share is a strong indicator we need to bust a monopoly for the public interest.
Re:Cloak and dagger – a new kind of attacks for Android by amygdyl on Thursday May 25, 2017 @08:45AM (#14416935)
I wonder if Apple was perceived to be playing a security first product approach, whether this same audience would not be able to find a far more forgiving view of the Apple price list?