CommunityNews

CommunityNews

Frustrated dev drops three zero-day vulns affecting Apple iOS 15

Upset with Apple’s handling of its Security Bounty program, a bug researcher has released proof-of-concept exploit code for three zero-day vulnerabilities in Apple’s newly released iOS 15 mobile operating system.

The bug hunter, posting on Thursday to Russia-based IT blog Habr under the name IllusionOfChaos and to Twitter under the same moniker, expressed frustration with Apple’s handling of vulnerability reports.

“I’ve reported four 0-day vulnerabilities this year between March 10 and May 4, as of now three of them are still present in the latest iOS version (15.0) and one was fixed in 14.7, but Apple decided to cover it up and not list it on the security content page,” the researcher wrote.

“When I confronted them, they apologized, assured me it happened due to a processing issue and promised to list it on the security content page of the next update. There were three releases since then and they broke their promise each time.”

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

Most Liked

OvermindDL1

OvermindDL1

Saw this in the news, apple really really screwed up…

Where Next?

Popular Macos topics Top

First poster: bot
Engineers at Cloudflare and Apple say they’ve developed a new internet protocol that will shore up one of the biggest holes in internet ...
New
New
First poster: davearonson
Run MacOS Software On Linux Using Darling - OSTechNix. Darling is a translation layer that allows us to run macOS applications on Linux....
New
First poster: bot
Apple sues NSO Group to curb the abuse of state-sponsored spyware. Apple today filed a lawsuit against NSO Group to hold it accountable ...
New
New
New
First poster: bot
How Apple overcame its culture of secrecy to create AirPods Pro. A former Apple HR business partner explains how the famously insular co...
New
First poster: bot
Apple Music has quietly increased the price of its student plan in the United States, Canada and the United Kingdom. In the United States...
New
First poster: bot
Apple intros “extreme” optional protection against the scourge of mercenary spyware.
New
First poster: bot
Steve Jobs negotiates Apple’s deal with Microsoft. Greg, Here is a review of the terms we last discussed, as well as some issues I have ...
New

Other popular topics Top

wolf4earth
@AstonJ prompted me to open this topic after I mentioned in the lockdown thread how I started to do a lot more for my fitness. https://f...
New
Exadra37
Please tell us what is your preferred monitor setup for programming(not gaming) and why you have chosen it. Does your monitor have eye p...
New
brentjanderson
Bought the Moonlander mechanical keyboard. Cherry Brown MX switches. Arms and wrists have been hurting enough that it’s time I did someth...
New
AstonJ
I’ve been hearing quite a lot of comments relating to the sound of a keyboard, with one of the most desirable of these called ‘thock’, he...
New
AstonJ
Thanks to @foxtrottwist’s and @Tomas’s posts in this thread: Poll: Which code editor do you use? I bought Onivim! :nerd_face: https://on...
New
Margaret
Hello content creators! Happy new year. What tech topics do you think will be the focus of 2021? My vote for one topic is ethics in tech...
New
dimitarvp
Small essay with thoughts on macOS vs. Linux: I know @Exadra37 is just waiting around the corner to scream at me “I TOLD YOU SO!!!” but I...
New
PragmaticBookshelf
Build highly interactive applications without ever leaving Elixir, the way the experts do. Let LiveView take care of performance, scalabi...
New
gagan7995
API 4 Path: /user/following/ Method: GET Description: Returns the list of all names of people whom the user follows Response [ { ...
New
PragmaticBookshelf
Build efficient applications that exploit the unique benefits of a pure functional language, learning from an engineer who uses Haskell t...
New