News for hackers. Stuff that matters.

A comment on Reverse Engineering the Apple Multipeer Connectivity Framework. Parent comment

Re:Reverse Engineering the Apple Multipeer Connectivity Fram... by Gorbzel on Friday August 11, 2023 @10:13AM (#37088902)
What he’s basically saying here is “I’d rather let my personal opinion prevail than responsibly disclose and get some vulnerabilities fixed.”

Even if, at their worst, Apple is as petty as he’s “heard” (given the FUD surrounding quite a lot of engineer’s), the proper response is responding with less pettiness, not more. It’s reflective of the author’s character no matter how he expressed the tantrum.

[ Parent | on HN ]
Re:Reverse Engineering the Apple Multipeer Connectivity Fram... by valianteffort on Friday August 11, 2023 @10:46AM (#37089267)
Reporting a vulnerability should be extremely low effort. Regardless of how I feel about a company I wouldn't want users to get screwed. I tried to disclose to google once and they required an account so instead I moved on with my life. I don't care about random people enough to make a google account.
[ Parent | on HN ]
Re:Reverse Engineering the Apple Multipeer Connectivity Fram... by RoseRose on Friday August 11, 2023 @11:01AM (#37089480)
Well this is absolute bullshit. You're discussing private software. It's up to the owner to offer a bug program that's enticing enough to debug their own software if they care.
[ Parent | on HN ]