> When Google approached us, we were already in the process of fixing the exploited bugs.
If Apple already knew about the flaw, then why did they never notify those affected?
If Apple already knew about the flaw, then why did they never notify those affected?
I agree that they should have told those who were affected, but perhaps they did?
Why would they? This is Apple, one of their selling points is how they don't have fingers in your phone
Apple's selling point is that they don't make money selling your private data (or transitive access to it) to third parties, but they don't make any claims about not doing it themselves.
I don't see anything that would preclude them from installing some telemetry for this specific attack. And I think it would be perfectly justified in the name of security too.
Why can't an exploit just disable this?
attack was narrowly focused, not a broad-based
exploit of iPhones “en masse”
“mass exploitation” ... This was never the case.
If they don't, then they really shouldn't be making claims that the exploit wasn't widespread. They really don't know one way or the other. Otherwise, they could have notified those that were vulnerable / exploited.