Skip to Content

Former Apple engineer offers fixes for Month of Apple bugs silliness

Landon Fuller, programmer and former Apple BSD Technology Group engineer extraordinaire, has offered to try and provide fixes for the exploits that appear during this asinine Month of Apple Bugs. Landon has already posted workarounds for the QuickTime vulnerability, and he links a change the VLC team has already made to their codebase (which is likely to be rolled out soon).

I join many others in thanking Landon for his work, but I still wish he didn't have to do it. Why should a former Apple engineer use his free time to chase after publicized exploits, when Apple themselves (and any 3rd parties) should be the ones to fix these problems at their core?

Thanks Bill I

Categories

Software Apple Security Blogs

Landon Fuller, programmer and former Apple BSD Technology Group engineer extraordinaire, has offered to try and provide fixes for the...
 

Add a Comment

*0 / 3000 Character Maximum

10 Comments

Filter by:
Xapplimatic

Well the month of bugs must not be going so well if they have to target a third party product like VLC.. Apple is not responsible for bugs in VLC.. afterall, it's developed simultaneously for several platforms..

January 06 2007 at 3:04 PM Report abuse rate up rate down Reply
Eric

If Apple release a bug fix every single day or officially publicly state they are investigating the claims, it means they are admitting that their "secure" platform is exploitable for a whole month. This doesn't do good for their reputations.

Getting someone to "unofficially" fix these bugs in the mean time won't damage Apple's reputation (who knows, the engineer may be under the order of Apple to do this) while satisfying security-concerned customers. Then Apple can officially release a security update later (after the month) that people won't associate with the exploitable month.

That's what I think, may be it is completely wrong...

January 03 2007 at 5:42 PM Report abuse rate up rate down Reply
Nick

RSS?

There isn't one at the info-pull site, but they've also taken out a site at Blogger called "Apple Fun". That has an RSS feed.

Warning: do not visit this site if you are of a nervous disposition. It has a somewhat juvenile cartoon on the right-hand site that some Apple users may find offensive:

http://applefun.blogspot.com/

January 03 2007 at 3:39 PM Report abuse rate up rate down Reply
Grant Hutchins

The month of Apple bugs site has no RSS feed that I was able to find, but this engineer's site does. Needless to say, I will be reading his fix articles and mostly forgetting about reading the actual bug ones.

If they wanted to be relevant they should at least catch up to modern-day meme-spreading.

January 03 2007 at 3:17 PM Report abuse rate up rate down Reply
Ian S

Comment #1 is quite true. Gotta love OS X but after working with them periodically I can also relate that my experience has been that getting them to fix *anything* is like pulling teeth.

January 03 2007 at 2:24 PM Report abuse rate up rate down Reply
mike

I totally agree with Ernest's comment! We need to take security seriously as the platform gets more and more popular. Why are typical Mac users so adverse to this way of thinking?

January 03 2007 at 2:00 PM Report abuse rate up rate down Reply
Scott Stevenson

It's not clear to me what Apple should do here. Release a security fix via Software Update every day for a month?

January 03 2007 at 1:48 PM Report abuse rate up rate down Reply
Skroob

Because an independent engineer can develop a workaround without the hassle of the exhaustive testing an official patch requires. Also he can start work on it faster because instead of submitting the bug to Apple like a normal person, they are announcing it to the world in an obvious publicity stunt, modeled on the idiocy of the wireless driver issue.

January 03 2007 at 1:37 PM Report abuse rate up rate down Reply
metric152

Because apple drags their feet when it comes to fixes. Someone needs to put a fire under their butt to get anything done.

January 03 2007 at 1:32 PM Report abuse rate up rate down Reply
Michel

maybe because theses persons totally bypass Apple own management and planning
and also try to ignore than Vlc developpers have tools to inform about bugs.

http://www.videolan.org/support/index.html

maybe...

January 03 2007 at 1:05 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.