How about people stop releasing this sh*t on twitter?
That's a very tenuous exploit, seeing as it relies on physical access and knowledge that the victim is already running a program which would hand the password to the attacker were the password typed into it, and I'm assuming that changing focus once the lock screen is active is even possible.
But once the attacker has physical access, there are more things they can do, I'm certain, making this a rather pointless exploit as well. So disclosure isn't giving anyone a new road into the system, it's just making people aware of a potential security flaw in a way Apple might actually care about.
It's good practice to always assume bugs aren't innocuous even if you can't think of a way to exploit it.
Announcing on Twitter seems more like "hey be careful, make sure your password field is focused."
Its a flaw that needs to be fixed, for sure, but lets not over-exaggerate the severity as an attack surface. Its much, much more likely that it will cause accidental problems when the owner types something (like in the tweet).
> if this bug is real
Why wouldn't it be? Plenty of people here and on twitter are reporting having hit similar issues (with OS X and even linux, so it doesn't seem completely uncommon).
That to me is not the right way to think, but in the day and age where number of likes and followers is king, I'd say it's not too irrational.
I think the cause is more pertinent than the symptom here - Apple don't seem to notice filed bugs unless they blow up on Twitter.