Hacker News Reader

Comment by fortran77 | Hacker News Reader

iOS is full of holes. How can Apple in good faith say it is "secure by design?" (See https://www.apple.com/business/docs/site/AAW_Platform_Securi... )

View on HN

My linked list of these comments will continue to grow until you stop doing this: https://news.ycombinator.com/item?id=23504129

Let’s give a experienced group of hackers nearly unlimited budget to find security holes in your competitor’s products.

There’s of course, zero bias in that approach, none whatsoever. /s

If project zero spent even half as much time finding and fixing security exploits in Android as they do just finding exploits in IOS, Google would have a truly competitive product from a security perspective.

FYI, it's not just Project Zero. Zerodium stopped paying for iOS exploits due to oversupply[1][2]

[1]: https://appleinsider.com/articles/20/05/14/software-bug-brok...

[2]: https://twitter.com/Zerodium/status/1260541578747064326

I really don't see the problem with this, finding vulnerabilities is hard work and many times the results are used for nefarious purposes.

You seem to be concerned that Project Zero would be used as marketing material against competitors but I saw no sign of that.

Apple should thank Google for the high quality free labor.

Pretty sure Google follows responsible disclosure - https://en.wikipedia.org/wiki/Responsible_disclosure. Also it actually helps Apple, as Google team discovered it before it being exploited in the wild.

Reply on news.ycombinator.com