Hacker News Reader

Hacker News

Comment by simonh | Hacker News Reader

Parent Full thread

simonh

How many Google bugs have received the same volume of exposition as this Apple bug?

View on HN

No idea, but here are some Android write-ups I grabbed:

https://googleprojectzero.blogspot.com/2016/09/return-to-lib...

https://googleprojectzero.blogspot.com/2019/03/android-messa...

https://googleprojectzero.blogspot.com/2015/11/hack-galaxy-h...

Here's some about Chrome:

https://googleprojectzero.blogspot.com/2016/11/breaking-chai...

https://googleprojectzero.blogspot.com/2014/10/did-man-with-...

https://googleprojectzero.blogspot.com/2019/04/virtually-unl...

Now see if any of those were reported in the mass media. Not The Verge. Not Vice. No tech publications. Front page of BBC news, The Washington Post, NY Times, etc.

That is not PZs problem.

It is when they submitted the Apple releases to all these venues the day Apple's keynote invites dropped.

Make up stories to prove your point.

The OP was using examples from PZ as a rebuttal to the GP asking if any Google products getting widespread coverage. The provided links are completely and utterly irrelevant. Your average commuter was reading about how terribly insecure iOS is based on PZs report being sensationalised in the media at large. The “tech” journalists write based on these articles, therefore PZ need to lay out the all the facts.

PZ posts on it's blog. What gets picked up by other media as news is not their mandate.

Independent security researchers are comparing this to the "Aurora" hack of Google[1].

While that was undoubtedly of a larger scope, it was also the event that led to the creation of P0, so it would make sense that this gets more exposure than your average bug report. Most security bugs aren't multi-exploit zero-day chains found in the wild being currently used to oppress people by a state actor.

[1]: https://twitter.com/alexstamos/status/1170064458003054594

To be fair, this is a highly unusual situation, with long chains of interesting and complex vulnerabilities and multiple zero-days against probably the most scrutinized consumer device currently.

Most Google bugs are… much less interesting.

Reply on news.ycombinator.com