Google reveals fistful of flaws in Apple's iMessage app (bbc.co.uk)

Article summary

Google's Project Zero team has discovered six vulnerabilities in Apple's iMessage software, five of which have been fixed by Apple in a recent update. The sixth vulnerability remains unfixed, and Google is withholding details until a 90-day deadline has passed. The vulnerabilities could have allowed hackers to crash apps or execute commands on iPhones and other Apple devices. Apple has urged users to update their software to protect against the fixed vulnerabilities.

Main themes

• Apple iMessage vulnerabilities
• Google Project Zero
• Software security
• Bug disclosure
• Apple vs Google

What commenters say

• The disclosure of vulnerabilities by Google's Project Zero team is a form of free white-hat testing that helps improve Apple's software security.
• The team's actions can be seen as a form of marketing that embarrasses competitors, but ultimately improves software security.
• Apple's software quality has declined in recent years, and the company's ability to fix vulnerabilities quickly is lacking.
• The release of vulnerability details by Project Zero can put pressure on companies like Apple to fix bugs quickly, but may also give bad actors time to exploit them.
• The motivations behind Project Zero's activities are likely complex and multifaceted, involving both a desire to improve software security and to promote Google's interests.
• Some commentators believe that Project Zero's approach is too aggressive and can be damaging to companies like Apple, while others see it as a necessary measure to improve software security.
• The fact that Apple is getting free bug fixes and security testing from Project Zero is a positive outcome, regardless of any potential motivations behind the team's actions.