That ‘vulnerability’ required the user to click on a link that the user had no way to know whether it was trustworthy or not.
Only the stupid do such clicking.
My guess is, Maynor feels dissed that Apple doesn’t jump and fetch at his beck and call. That has nothing to do with vulnerabilities and everything to do with Apple’s corporate culture. They almost never admit to problems of any sort. When they fix something, they are instead dealing with an issue. (exceptions have been when they are forced to do a recall on an item.)
It’s just their way of doing things - everything, not just ‘vulnerabilities’.
Even with all that, there hasn’t been a real in-the-wild computer-being-taken-over-by-something type problem that I recall since the Autostart Worm more than 10 years ago. The solution to that was to check a checkbox to keep executables from automatically starting when you inserted a CD in the CD drive.
“Even with all that, there hasn’t been a real in-the-wild computer-being-taken-over-by-something type problem that I recall since the Autostart Worm more than 10 years ago. The solution to that was to check a checkbox to keep executables from automatically starting when you inserted a CD in the CD drive.”
Not true - look at the Metasploit and CANVAS links i posted. That’s not even counting what the bad guys have.
“That ‘vulnerability’ required the user to click on a link that the user had no way to know whether it was trustworthy or not.
Only the stupid do such clicking.”
That’s a silly assumption. Thanks to XSS you can click without clicking, or have a trustworty link rewritten to go to a fake one. Or fall victim to a phishing attack. Calling people who those (and more) things happen to, stupid, is well... uninformed.