My teen found a major security flaw in Apple’s new iOS. He can listen in to your iPhone/iPad without your approval. I have video. Submitted bug report to ...waiting to hear back to provide details. Scary stuff! #apple #bugreport
Conversation
FWIW, to report Apple security bugs, look under “Security and privacy researchers” on this page. This is not obvious to non-developer/non-security folks
support.apple.com/en-us/HT201220
For general bugs, bugreport.apple.com (also not obvious to non-developers).
1
2
11
I reported the bug there after registering as a developer (even though I’m not, I was told I could) and also emailed product-security@apple directly.
1
2
26
nicely done to him (and to you for helping the message across!). if this gave him a taste for it, i highly recommend he checks out #bugbounty hunting as a way to do more of it, sharpen his skills, run with a good crowd, and earn some cash too :)
1
3
lot's of companies do it these days, and there are platforms like (which i'm the founder of) that help with learning on his end, and getting the message through on the vendor side
1
4
This Tweet was deleted by the Tweet author. Learn more
Apple should have disabled Group FaceTime right away from the moment they confirmed this bug. For a company concerned about our privacy this is beyond huge. If this was reported to apple more than a week ago then apple dropped the ball big time by responding so late.
1
5
26
