News for hackers. Stuff that matters.

A comment on About the security content of macOS High Sierra 10.13.2. Parent comment

Re:About the security content of macOS High Sierra 10.13.2 by arubberduck on Wednesday December 06, 2017 @04:01PM (#15864965)
Google has long been Apple's security division. Often I wonder if Apple has any security people at all. The last Safari update had 11 CVEs from Google. Most of Apple's updates credit one or more issues to Google, and often Apple credits OSS-Fuzz, which is also a Google project.
[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by sigmar on Wednesday December 06, 2017 @05:54PM (#15865913)
>Often I wonder if Apple has any security people at all.

It just feels like they don't since they don't let their security people have social media presences. For example, their recent hire Jonathan Zdziarski

[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by saagarjha on Wednesday December 06, 2017 @08:41PM (#15866892)
It looks like you were cut off there…
[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by NamTaf on Wednesday December 06, 2017 @11:02PM (#15867538)
No, reread it as "For example, [consider] their recent hire Jonathan Zdziarski[, whom you'll see is a leading iOS security researcher from a cursory Google search]"

The GP just omitted a bunch of implied statement, which isn't immediately obvious especially if you don't natively speak English.

[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by giancarlostoro on Thursday December 07, 2017 @07:06AM (#15869354)
He forgot a period at the end, so it does look like he got cut off potentially.
[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by dep_b on Wednesday December 06, 2017 @07:24PM (#15866464)
You don't credit internal employees in this way. These bugs were reported through official channels.
[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by forgot-my-pw on Wednesday December 06, 2017 @07:08PM (#15866355)
Security Update 2017-001 was released November 29, 2017: https://support.apple.com/en-ca/HT208315

Does it mean it's the first security update of the year? :(

[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by dep_b on Wednesday December 06, 2017 @07:22PM (#15866449)
No, just for this OS
[ Parent | on HN ]
Re:About the security content of macOS High Sierra 10.13.2 by forgot-my-pw on Friday December 08, 2017 @12:42PM (#15880405)
High Sierra was released in June 2017. So that's still 6+ months without security patches. Not sure if that's a great track record or poor patching planning?
[ Parent | on HN ]