Linked by Thom Holwerda on Fri 20th Mar 2009 13:51 UTC, submitted by google_ninja
Privacy, Security, Encryption Fresh from winning the PWN2OWN contest yesterday, Charlie Miller has been interviewed by ZDNet. He talks about how Mac OS X is a very simple operating system to exploit due to the lack of any form of anti-exploit features. He also explains that the underlying operating system is much more important in creating a successful exploit than the bowser, why Chrome is so hard to hack, and many other things.
Thread beginning with comment 354172
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[3]: Comment by sadyc
by Bounty on Fri 20th Mar 2009 18:14 UTC in reply to "RE[2]: Comment by sadyc"
Bounty
Member since:
2006-09-18

Let put it in another way: If somebody is spending a significant numbers of hours to find a way into your home, without you asking him to do so, means it is ok for him to sell that information and make money from it?


Nobody is doing that though, and regardless of what Mr. Miller does, there will be people spending hours breaking into Apple and Microsoft. If I knew for a fact that people were spending hours trying to figure out how to break into my home, I would happily pay a grey hat to preemptively find those bugs. And I completely understand if a grey hat didn't want to give that info to me for free.

Mr. Miller works for a security company. Obviously they are not getting paid by Apple for their bugs. They probably are paid by banks etc. So Mr. Miller does some Apple research to let the banks know what their risks are for using Apple software. It's like working as a plumber. I don't see plumbers going around notifying us of potential leaks in our houses that could cause damage.

Hell I wish I could be so lucky as to have an electrician come over, audit my house, demonstrate a fire hazard, then ask for $ to fix it. If he can't he walks away broke. Does anyone go around inspecting car brakes for free?

Reply Parent Score: 4