Hacker Timesnew | past | comments | ask | show | jobs | submit | agent123's commentslogin

"Google winning is good for everyone" is propaganda that Google uses when they are threatened. Google is no different from any other corporation. Once they have power, they exercise it to their advantage to increase their share of profits.

Also, you should check your facts - Samsung has not exceeded Apple in smartphone profits. They have exceeded Apple in phone profits overall. You might as well throw washing machines into the mix if you are going to include profits from single purpose appliances that are not general purpose computers.

So basically because you "want Google to win" because you believe they are somehow different from any other corporation, you are trumpeting a false statistic in order to convince others that destiny is somehow at work, going in the direction you want.

If this isn't shilling for Google, I don't know what is.


That plus the fact that Android tablets aren't really used and the game is much better on a tablet than a phone.


Well no, that's exactly what you want to find out from data like this. :)

(Well, what I was curious about, anyway.)


A commit to a repository does not equal a patch to the half billion vulnerable devices in the field.


Yes, captain obvious? What do you suggest?


Instead of minimizing or dismissing serious problems as 'already patched', hackers could help by warning consumers about the proliferation of Android malware. If sales were jeopardized, vendors would start caring about updates.


So your suggestion is to pass the buck onto "vendors"? Who are they and what can they do about it? Think outside the box!


You don't seem to have any understanding of how Android works. The buck does stop at vendors since they are the ones who ship OS updates to consumers.

Vendors don't prioritize updates because their customers don't understand enough to make this part of their purchasing decision, so there is little incentive for them to spend resources on it.

Minimizing this major problem doesn't help.

And - instead of saying 'think outside the box' - why not actually contribute some out of the box thinking?


What he leaves out is that he waited less than a day for a response. (You can see this from the radar shown in his video)


His video shows that he filed radars on July 19th - the same day downloaded the 100,000 developer names and email addresses.

This is not responsible reporting, and he's clearly broken the UK computer misuse laws, since he signed an agreement with Apple governing the use of these systems.

I hope he's arrested soon. This behavior does nothing to help legitimate business or the security community.


If it truly was same day, I agree, that changes everything. I'll wait until more information comes out to decide.


He claims that he reported the bug to Apple before doing a 'pentest' but his video shows a radar filed on 19th.

On the plus side, it seems like not so much a 'penetration' as a data leak from some GWT code.


You can't have it both ways. They were transparent. Complaining that it was 3 days after the incident is irrelevant since we don't know how much investigation was required for them to understand the problem.


>You can't have it both ways.

Why not? See: Ubuntuforums

>we don't know how much investigation was required for them to understand the problem.

I agree, but i find it hard to believe a company the size of Apple, with the talented force that they have, couldn't have identified that they might've been breached, within 3 days.

3 days.


How? They took it offline.


Yes, when they discovered it. We don't know for how long they have actually been compromised. Also, imagine if it happens again and is not discovered.



That's why I started the original post with "Imagine..." :)

(Plus, a single PR release about one incident doesn't exclude the possibility of other (known or unknown) incidents taking place)


No. That tells us nothing about how big the breach is. Only how much effort it is taking for them to be confident that they've properly patched it.


Shadenfreude? Do you mean something other than just enjoying their misfortune?

And 'taking responsibility' means solving the problem. They have told us what they are dealing with. What more do you want from them?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: