Re:I discovered a browser bug
by acdha on Thursday June 21, 2018 @10:26AM
(#17365409)
Yes – I even got a nice email from someone apologizing about that and explaining that they were trying to get the [email protected] people to at least forward messages when I did a full disclosure release after not receiving a response.
[ Parent
| on HN ]
Re:I discovered a browser bug
by philipodonnell on Thursday June 21, 2018 @10:43AM
(#17365595)
> they were trying to get the [email protected] people to at least forward messages when I did a full disclosure release after not receiving a response
That sounds a bit dysfunctional on Apple's part that they can't exert that kind of control over their own employees for an issue with potentially enormously negative consequences.
Re:I discovered a browser bug
by reaperducer on Thursday June 21, 2018 @12:31PM
(#17366621)
That sounds a bit dysfunctional on Apple's part that they can't exert that kind of control over their own employees for an issue with potentially enormously negative consequences.
I'm not saying it isn't dysfunctional, but it sounds like every single large company I've ever worked with or for.
Especially when "security" is provided by a third-party security company.
This was awhile back in the unverified TLS certificate era so I'm assuming they got more serious about it.