Former Apple engineer offers fixes for Month of Apple bugs silliness
Landon Fuller, programmer and former Apple BSD Technology Group engineer extraordinaire, has offered to try and provide fixes for the exploits that appear during this asinine Month of Apple Bugs. Landon has already posted workarounds for the QuickTime vulnerability, and he links a change the VLC team has already made to their codebase (which is likely to be rolled out soon).I join many others in thanking Landon for his work, but I still wish he didn't have to do it. Why should a former Apple engineer use his free time to chase after publicized exploits, when Apple themselves (and any 3rd parties) should be the ones to fix these problems at their core?
Thanks Bill I
Share
Landon Fuller, programmer and former Apple BSD Technology Group engineer extraordinaire, has offered to try and provide fixes for the...
Add a Comment
Well the month of bugs must not be going so well if they have to target a third party product like VLC.. Apple is not responsible for bugs in VLC.. afterall, it's developed simultaneously for several platforms..
January 06 2007 at 3:04 PM Report abuse Permalink rate up rate down ReplyIf Apple release a bug fix every single day or officially publicly state they are investigating the claims, it means they are admitting that their "secure" platform is exploitable for a whole month. This doesn't do good for their reputations.
Getting someone to "unofficially" fix these bugs in the mean time won't damage Apple's reputation (who knows, the engineer may be under the order of Apple to do this) while satisfying security-concerned customers. Then Apple can officially release a security update later (after the month) that people won't associate with the exploitable month.
That's what I think, may be it is completely wrong...
RSS?
There isn't one at the info-pull site, but they've also taken out a site at Blogger called "Apple Fun". That has an RSS feed.
Warning: do not visit this site if you are of a nervous disposition. It has a somewhat juvenile cartoon on the right-hand site that some Apple users may find offensive:
http://applefun.blogspot.com/
The month of Apple bugs site has no RSS feed that I was able to find, but this engineer's site does. Needless to say, I will be reading his fix articles and mostly forgetting about reading the actual bug ones.
If they wanted to be relevant they should at least catch up to modern-day meme-spreading.
Comment #1 is quite true. Gotta love OS X but after working with them periodically I can also relate that my experience has been that getting them to fix *anything* is like pulling teeth.
January 03 2007 at 2:24 PM Report abuse Permalink rate up rate down ReplyI totally agree with Ernest's comment! We need to take security seriously as the platform gets more and more popular. Why are typical Mac users so adverse to this way of thinking?
January 03 2007 at 2:00 PM Report abuse Permalink rate up rate down ReplyIt's not clear to me what Apple should do here. Release a security fix via Software Update every day for a month?
January 03 2007 at 1:48 PM Report abuse Permalink rate up rate down ReplyBecause an independent engineer can develop a workaround without the hassle of the exhaustive testing an official patch requires. Also he can start work on it faster because instead of submitting the bug to Apple like a normal person, they are announcing it to the world in an obvious publicity stunt, modeled on the idiocy of the wireless driver issue.
January 03 2007 at 1:37 PM Report abuse Permalink rate up rate down ReplyBecause apple drags their feet when it comes to fixes. Someone needs to put a fire under their butt to get anything done.
January 03 2007 at 1:32 PM Report abuse Permalink rate up rate down Replymaybe because theses persons totally bypass Apple own management and planning
and also try to ignore than Vlc developpers have tools to inform about bugs.
http://www.videolan.org/support/index.html
maybe...
Hot Apps on TUAW
Deals of the Day
more deals- Refurb Apple MacBook Air Laptops: 12" 64GB SSD for $699 + free shipping
- JVC Motion Sensing Clock Radio with Dual iPod Docks for $55 + free shipping
- Apple iPhone Headset with Mic for $4 + $2 s&h
- miFrame Picture Frame Dock for iPad for $64 + $8 s&h
- Refurb Apple iPod nano 8GB MP3 Player for $99 + free shipping, 16GB for $119
- Hannspree Apple-Shaped 28" 1080p LCD HDTV for $270 + free shipping
Software Updates
more updates- EFI Firmware Update brings Lion Internet Recovery to 2010-model Macs
- OS X Lion 10.7.3 released with Safari 5.1.3, Wi-Fi bug fix
- Aperture updated to 3.2.2, addresses Photo Stream issue
- Apple updates Keynote to address Lion issues
- Google Search app gets new look on iPad
- Apple releases Apple TV Software Update 4.4.3



10 Comments