Re:Bad Binder: Android In-the-Wild Exploit
by moyix on Thursday November 21, 2019 @04:31PM
(#21599879)
Right, something like this page is better evidence against that narrative:
https://bugs.chromium.org/p/project-zero/issues/list?q=Produ...
Re:Bad Binder: Android In-the-Wild Exploit
by joshuamorton on Thursday November 21, 2019 @05:05PM
(#21600219)
The narrative seems to be both that p0 doesn't do research into Google's stuff, and that p0 doesn't post bulletins about vulns in Google's stuff. Both are untrue, but if you point out one, people flip to the other.
Re:Bad Binder: Android In-the-Wild Exploit
by p1necone on Thursday November 21, 2019 @05:17PM
(#21600333)
The amount of work they put into finding issues isn't relevant though, it's the benefit google might be getting from other companies bad PR. So this situation still seems like a counterexample to me.
But writing up an exploit that was basically handed to them is pretty weak evidence against the angry narrative.