Linked by Thom Holwerda on Wed 20th Dec 2006 10:08 UTC
Apple A pair of security researchers has picked January 2007 as the starting point for a month-long project in which each passing day will feature a previously undocumented security hole in Apple's OS X or in Apple applications that run on top of it. The 'Month of Apple Bugs' project, currently slated to begin on Jan. 1, is being orchestrated in part by a security researcher who asked to be identified only by his online alias 'LMH'. This is the same researcher who in November ran the 'Month of Kernel Bugs' project. LMH's partner in this project is Kevin Finisterre, a researcher who has reported numerous bugs to Apple over the past few years. As with the kernel bugs project, Apple will be given no advance notice with the Month of Apple bugs, LMH said.
Thread beginning with comment 194600
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: A question of credibility
by angryrobot on Wed 20th Dec 2006 14:11 UTC in reply to "A question of credibility"
angryrobot
Member since:
2006-04-26

Well that's really the rub isn't it? I mean, it's like any sort of headline grabbing claim. It doesn't matter if it's true or not, because once the damage has been done, the "retraction" will never see the light of day.

What this guy should have done if he wanted to grab headlines was:

1) Find a bunch of security related bugs in OSX
2) Tell Apple and say "I give you a month" or whatever
3) Wait 1 month
4) Publish findings publicly to shame them, including the part about notifying them in advance

Then he would seem responsible, yet would grab even more headlines. This just kind of makes him look like a tool.

Reply Parent Bookmark Score: 3