About the security content of Security Update 2018-001

Re:About the security content of Security Update 2018-001 by threeseed on Tuesday May 01, 2018 @11:25PM (#16973811)

What is with this title ? It's a result of two CVEs.

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by keyle on Tuesday May 01, 2018 @11:47PM (#16973888)

It just implies that it's a good news story, where Google helped Apple make their software better and safer for everyone.

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by awat on Tuesday May 01, 2018 @11:45PM (#16973884)

In the support article Apple is crediting one of the CVEs “CVE-2018-4206: Ian Beer of Google Project Zero”

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by PakG1 on Wednesday May 02, 2018 @12:11AM (#16973996)

Title could still be better than it is, I think. Original title is much better. Things like attribution can be done fine in the comments if that's not in the title.

Furthermore, Project Zero was involved in only one of the CVEs anyway then. Why not put the other credit in the title too? CVE-2018-4187: Zhiyang Zeng (@Wester) of Tencent Security Platform Department, Roman Mueller (@faker_)

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by rurban on Wednesday May 02, 2018 @01:14AM (#16974230)

Correct. And I would rather emphasise Tencent more. They did amazing security work in recent years, to me more impressive work than Google zero.

[ Parent | on HN ]