In an interview with the people at News.com David Maynor talks about his experience with Apple on the topic of the Wifi Hack that both Jon Ellch reviled:
David Maynor, chief technology officer at Errata Security, at Black Hat on Wednesday finally broke the deadly silence on the issue of the Mac Wifi Hack. The controversy began last summer at the Black Hat Conference when David Maynor and "Jonny Cache" Jon Ellch demonstrated a vulnerability on the Mac by sending malformed network traffic to it, causing him to have complete control of the computer. After the presentation havoc began when the Apple Community and the Mac maker criticized both Maynor and Ellch for the release of the vulnerability. The Mac creator even when to the extent of pressuring Maynor to post a blog entry on the SystemWorks website stating that Macs were not flawed. Maynor plans to release the code used to execute the attack soon.
Then, about two months later what do you know Apple released, Mac OS X 10.4.8, which fixed the vulnerability that was found by Maynor and Ellch.
Maynor stated on Wednesday that:
"The vulnerability that was being exploited was now patched," Maynor said. "Apple released some security patches to address stuff I actually pointed them to and they claimed had nothing to do with me."
A bit after Apple released the security patches which fixed the vulnerability Maynor set to demonstrate the hack at the ToorCon hacker event in San Diego. But this event was pulled because Apple threatend to sue SystemWorks.
Maynor stated:
"I do not feel comfortable keeping relations with the company and will not report future findings to them."
Clearly, Apple is taking the credit for his findings while threating Maynor and Ellch for finding the vulnerabilities. Come on Apple, their job is to find security vulnerabilities and they found them, and in doing so allowed you to created a more secure operating system. As far as I'm concerned this is very unprofessional and immature of Apple, Apple give credit where credit is due!
[C|NET News.com]