FREN

#FF00AA


2 sep. 2014

I’m reminded of a comment I saw on Reddit yesterday: not only can Apple be maddeningly slow at fixing security vulnerabilities after they’ve been reported, but it also doesn’t offer bounties for reporting them. You know, just the kind of thing that might motivate a hacker to contact Apple instead of downloading a copy of Jennifer Lawrence’s iCloud backup. (Or, more likely, just after downloading it, but that would still be progress.) I’m not so good at business, but I kinda feel that Apple could afford it. And, evidently, so do all the hackers who prefer to exploit a vulnerability rather than be, at best, graciously credited in the patch notes by one of the richest companies on Earth.

You can’t be lazy or complacent when it comes to security; you can’t be stingy, either.

Want to know when I post new content to my blog? It's a simple as registering for free to an RSS aggregator (Feedly, NewsBlur, Inoreader, …) and adding www.ff00aa.com to your feeds (or www.garoo.net if you want to subscribe to all my topics). We don't need newsletters, and we don't need Twitter; RSS still exists.

Legal information: This blog is hosted par OVH, 2 rue Kellermann, 59100 Roubaix, France, www.ovhcloud.com.

Personal data about this blog's readers are not used nor transmitted to third-parties. Comment authors can request their deletion by e-mail.

All contents © the author or quoted under fair use.