Path: ...!3.eu.feeder.erje.net!feeder.erje.net!usenet.goja.nl.eu.org!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Alan <nuh-uh@nope.com>
Newsgroups: misc.phone.mobile.iphone,comp.sys.mac.apps
Subject: Re: Orphaned CodoPods are found in Apple software
Date: Sun, 7 Jul 2024 12:07:53 -0700
Organization: A noiseless patient Spider
Lines: 25
Message-ID: <v6ep29$ethv$4@dont-email.me>
References: <v6brna$16iit$1@news.samoylyk.net> <rzeiO.8448$pVB9.6500@fx34.iad>
 <v6c85a$17bja$1@news.samoylyk.net> <v6c8sk$9fdv$1@solani.org>
 <letr8cFge14U2@mid.individual.net> <v6cjb6$9l4b$1@solani.org>
 <v6ckup$186t1$1@news.samoylyk.net> <Z5viO.11483$6eV2.7178@fx12.iad>
 <v6eour$1copo$1@news.samoylyk.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sun, 07 Jul 2024 21:07:54 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="790cd3862da191afc565528a27af80b4";
	logging-data="489023"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX18EdUaSneL6aSajy/yK9l8L7sQonXp8H/k="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:fsnAJmSpkb7T6JOxVvwqhfL9ZPg=
In-Reply-To: <v6eour$1copo$1@news.samoylyk.net>
Content-Language: en-CA
Bytes: 2184

On 2024-07-07 12:06, Wolf Greenblatt wrote:
> On Sun, 7 Jul 2024 07:37:29 -0400, Alan Browne wrote:
> 
>>> Isn't Swift touted to be "safe by design" on Apple own corporate web pages?
>>
>> You have 0 understanding of 3rd party toolchains and 3rd party code bases.
> 
> Probably very true. All I know is researchers found a flaw in millions of
> mac/iOS apps and Apple didn't find that same flaw even after a decade.

Actually, no.

They found a flaw in one of the TOOLS developers USED to create millions 
of apps.

> 
> Shouldn't Apple care that millions of mac/iOS apps are vulnerable?

How, exactly?

> 
> The reports say that essentially every Apple owner is affected.
> So why wouldn't Apple care to do what researchers did, only 10 years ago?

How would they do that?