Hacker News Reader

I’m not a security researcher and I don’t work for Apple. If I casually came across this I would totally tweet it out. Anyone asserting I should follow some sort of procedure has a misplaced sense of reality.

View on HN

Yeah this is not like you have to craft special wireless packets to compromise the Broadcom network stack and then gain access. It's not that kind of vulnerability. This is really dumb and anybody can stumble across it. Hell, I work on network devices and non-production ones have root and blank as the password. I have tried the same in my laptop many times out of habit.

Responsible disclosure works when you are fairly certain you have found something nobody else knows about. Logging in with root must be known to many people.

You would do that.. but you don’t consider what you should do.. surely responsible disclosure is the smarter strategy?

Responsible vs irresponsible... how would I know? You’re assuming way too much.

The average person who has never heard these things may act as described, but the person should be criticized for it, and if they dont correct their mistake they should be criticized for that too. Thats the point of criticism.

Reply on news.ycombinator.com