Re:Google reveals fistful of flaws in Apple's iMessage app
by greycol on Tuesday July 30, 2019 @06:06PM
(#20569682)
Yes but if Apple is trying to "be seen as the secure and private platform" then really from a consumers point of view they should be diverting resources to being secure and private.
The fact that this is possibly two faced by google doesn't change the fact that it is a net good if Apple is sincere in their pivot, because they'd want this dealt with anyway and they get them highlighted for free. If Apple just want to be "seen" as secure and private without actually making it so then it's good that it's being exposed as hollow words.
You 'may' have a point with smaller competitors to Google but really Apple is a large enough target that there are other capable threats targeting them that will use these vulnerabilities for worse than just keeping them in line with their marketing material.
Re:Google reveals fistful of flaws in Apple's iMessage app
by cptskippy on Wednesday July 31, 2019 @01:36PM
(#20576459)
I don't understand why this is an either or type scenario. Apple should be focusing on security as you've stated, AND Google uses Project Zero as a tactical weapon.
Re:Google reveals fistful of flaws in Apple's iMessage app
by Kalium on Tuesday July 30, 2019 @04:30PM
(#20568799)
OK. In your mind, what's the ethically correct way to do security research into major company's products and disclose what you might find?
Re:Google reveals fistful of flaws in Apple's iMessage app
by cptskippy on Wednesday July 31, 2019 @01:39PM
(#20576488)
And independent nonprofit organization with a clear mission statement and no ulterior motives. Not Google Employees operating under the oversight of Google management.
Re:Google reveals fistful of flaws in Apple's iMessage app
by Kalium on Thursday August 01, 2019 @10:46AM
(#20584140)
Would the results still be ethically clear in your mind if this nonprofit with a clear mission statement received significant funding from Google?
Re:Google reveals fistful of flaws in Apple's iMessage app
by cptskippy on Thursday August 01, 2019 @01:49PM
(#20586396)
Like Mozilla? I think if such an organization existed, I would hope that it recognized the conflict of interest in such an arrangement and be working to clarify or rectify the arrangement.
The act of rapid public disclosure compels the target to shift resources and focus to respond to those potential dumps. This can negatively impact the company's strategically and put them in damage control mode.
In the case of Apple, they're not the dominant platform and are trying to pivot to be seen as the the secure and private platform. Google is damaging their credibility with that pivot by investing in finding vulnerabilities in their products and rapidly disclosing them.
Short term this could improve the product but long term it could damage Apple's reputation and further diminish their market share and solidifying Google's.
If Google were funding an independent research team tasked with securing the internet and platforms for the greater good that would be fine. But that isn't Project Zero. Project Zero is a weapon wielded by a company trying to protect it's monopoly.