- Tram Ho
The way Google revealed a major security flaw on the recent iPhone is clearly upsetting Apple. Google security researchers have revealed malicious websites that have used vulnerabilities not previously disclosed in iOS to hack into devices for at least the past two years.
While Apple did not dispute the research, the company criticized Google " instilling fear for iPhone users that their device has been compromised " because key details were omitted in the blog post. by Google.
Apple explained: " The sophisticated attack only focused on a narrow range, not a widespread iPhone exploitation error. The attack affected only a few dozen websites …"
Subsequent reports revealed that these websites also targeted Windows and Android users, but Google did not describe the details of the attacks. " All evidence indicates that these website attacks were done only in a short period of time, about 2 months, not 2 years as implied by Google ." Apple said.
Apple fixed these vulnerabilities in February, just 10 days after learning about security issues. " When Google approached us, we were in the process of fixing exploits." Apple explains. It is not clear whether Google is aware of whether these websites can hack Android devices or why the company did not disclose that the scope of the attack is only as narrow as Apple's statement . "
" Security is a never ending journey and our customers can be confident that we are working for them ." Apple said. " Our product security teams around the world are constantly introducing new protections and fixing holes as soon as we are found. We will never stop working tirelessly. tiring to keep users safe . "
For its part, Google upheld the stance of the first report. Here is their official statement to The Verge:
" Project Zero publishes technical research designed to improve understanding of security vulnerabilities, and lead to better defense strategies. We keep our in-depth research, which is written in "We will continue to work with Apple and other leading companies to keep people safe online ."
Refer to The Verge
Source : Trí Thức Trẻ