News for hackers. Stuff that matters.

A comment on Apple silently fixes iOS zero-day, asks bug reporter to keep quiet. Parent comment

Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by smoldesu on Wednesday October 13, 2021 @05:07PM (#28857743)
Apple's bug bounty is notoriously slow to respond, to the point that it has posed legitimate security concerns in the past: particularly their rhetoric around Thunderspy amused me.

https://habr.com/en/post/579714/

https://thunderspy.io

[ Parent | on HN ]
Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by simondotau on Thursday October 14, 2021 @12:52AM (#28860642)
Is this not a potential Sharpshooter fallacy? Are you sure that we aren't mainly hearing about bounties when Apple doesn't handle them smoothly and not so much when they are handled smoothly?

Or to put it another way, when you poll people who complain Apple is notoriously slow to respond, don't be surprised if your conclusion is that Apple is notoriously slow to respond.

[ Parent | on HN ]
Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by QuizzicalCarbon on Wednesday October 13, 2021 @05:17PM (#28857845)
How can we reasonably say Apple is moving slowly to fix bugs when we don’t know how much work is going on behind the scenes? A slow response can just be a slow response.
[ Parent | on HN ]
Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by smoldesu on Wednesday October 13, 2021 @05:31PM (#28857969)
I can reasonably say it because all of their competitors have less cash, yet many of them respond faster than Apple does.
[ Parent | on HN ]