Hacker News Reader

Comment by djcannabiz | Hacker News Reader

I think they are sueing (some of) them. There was a new yorker article (https://www.newyorker.com/magazine/2022/04/25/how-democracie...) on how apple and other tech firms are sueing NSO and some other actors under the grounds they are violating the Icloud EULA by using imessage to hack people.

View on HN

It seems really hard to find grounds to sue these spyware vendors that don't equally apply to security researchers doing the kind of work that makes spyware less viable overall.

That is not a realistic concern with most major vendors. Apple, for example, has clear guidelines on what security researchers are allowed to do. Anyone who follows those guidelines won't be sued.

https://security.apple.com/terms-and-conditions/

But they don't have to do that. They can choose to sue spyware vendors and not sue security researchers who have technically violated the same provision.

Precedent?

It’s pretty easy to brand security researchers as malicious if you don’t like them.

> It’s pretty easy to brand security researchers as malicious if you don’t like them.

OK.

But it's in Apple's interest to work with them. Because the alternative is that the 0-day exploits get sold to companies or countries that aren't Apple.

No such synergistic relationship exists between Apple and spyware vendors.

Just because it is in Apple's interest to work with security researchers does not mean they do so. Many such cases.

Of Apple suing security researchers?

Reply on news.ycombinator.com