bakztfutur3
Re:Zero-Click Calendar invite – Critical zero-click vulnerability chai...
on Friday September 13, 2024 @04:24PM (#41534779)
No, it's because Apple's 'product security' team that investigates and pays out bug bounties is horribly mismanaged and ineffective. It was recently moved from the SWE program office to SEAR (security engineering & arch), and the manager was recently shown the door and went to AirBNB. The team members are mostly new college grads (ICT2's and 3's) who wouldn't pass a coding interview elsewhere in the company, and mostly function as bug triagers. They spend more time going to conferences and hanging out with hackers, than in front of a computer screen working. Their portal of 'open investigations' shows a graph that only goes up (aka they only get more swamped with emails and don't even try to catch up).
Shaming Ivan, the head of SEAR, on Twitter is how people who should get paid bounties, but aren't, make progress.
Re:Old bills in Yemen are worth 10% more than new ones
on Tuesday May 19, 2020 @02:59PM (#23238706)
This is the most HN comment ever.
Re:What happens before main() is executed in C and why is it important?
on Friday May 04, 2018 @04:11PM (#16997868)
"Yeah, yeah, but your scientists were so preoccupied with whether or not they could that they didn't stop to think if they should."