@citizenlab interested to know if Lockdown Mode on iOS and macOS would have prevented the exploit?
@rjmd @citizenlab "We believe, and Apple’s Security Engineering and Architecture team has confirmed to us, that Lockdown Mode blocks this particular attack."
@citizenlab but ... we were told this cannot happen on #Apple, because they are secure? And it cannot happen because it's Google, not a small team of underpaid #opensource developers?
Weeks later, Google posted a proper CVE. A publicly funded civil society org, @citizenlab found this #vuln, while two of world's largest corps, #Google and #Apple, sat on it while making sure that their affected products were patched. That sure makes them look good to non-technical users. They are built on #FreeSoftware, and have more than enough resources to be a responsible steward, but failed to do the standard practice #CVE, screwing everyone else.