Security Researcher Won't Share macOS Keychain Bug

Security researcher Linuz Henze found a macOS Keychain bug but won’t share it with Apple out of protest.

Henze has publicly shared legitimate iOS vulnerabilities in the past, so he has a track record of credibility. However, Henze is frustrated that Apple’s bug bounty program only applies to iOS, not macOS, and has decided not to release more information about his latest Keychain invasion.

It is odd that there isn’t a macOS bug bounty but I think withholding security information isn’t the way to go.

U.S. Navy Needs to Destroy 2 Tons of Hard Drives

The U.S. Navy has issued a solicitation asking for an appropriate service to turn 4,000 pounds of storage devices into ash.

The information stored on these devices is highly sensitive, as evidenced by the physical security requirements set forth in the solicitation. The incineration facility must have “at the minimum, secure entry, 24-hour armed guards and 24/7 camera surveillance with recordable date and time capabilities.”

Any interested destruction service has to be located within 10 driving hours of the White Sands Missile Range.

What Would Happen if You Remove Apple From Your Life?

Kashmir Hill has experimented with cutting out tech giants from her life. In week 5 she found out what it was like to remove Apple.

In addition to abandoning all my iProducts, I am blocking myself from interacting with Apple in any way, using a custom VPN designed for me by technologist Dhruv Mehrotra. The VPN prevents my devices from communicating with the 16,777,216 IP addresses controlled by Apple, rendering iCloud and any Apple apps defunct.

It’s an interesting experiment, especially going so far as to block Apple IP addresses. I look forward to Ms. Hill’s next experiment: Blocking Amazon, Facebook, Apple, Google, and Microsoft all at once.