chockenberry, 26 days ago A not fun fact: I didn't get a security bounty for a macOS release that was done specifically to address an issue I found. https://mjtsai.com/blog/2024/05/14/no-bounty-for-kernel-vulnerability/ The rational was that I disclosed the issue publicly. Which I did after reporting it in the beta releases, and after they said “we're unable to identify an issue in your report”, AND AFTER THEY RELEASED THE FUCKING VULNERABILITY. https://mastodon.social/@chockenberry/111580066311950281 I have no energy/desire to argue with Apple, but this ain't a good look for a $3T company.
A not fun fact: I didn't get a security bounty for a macOS release that was done specifically to address an issue I found.
https://mjtsai.com/blog/2024/05/14/no-bounty-for-kernel-vulnerability/
The rational was that I disclosed the issue publicly. Which I did after reporting it in the beta releases, and after they said “we're unable to identify an issue in your report”, AND AFTER THEY RELEASED THE FUCKING VULNERABILITY.
https://mastodon.social/@chockenberry/111580066311950281
I have no energy/desire to argue with Apple, but this ain't a good look for a $3T company.
Add comment