it was always going to happen but
"This shows that there is an active community of researchers who are looking for vulnerabilities in MacOS X and *not* reporting their findings to Apple."
From memory there doesnt seem to be any point escalating any findings to apple as they dont actually do anything about them.
Queue Apples standard response "We can see how it may be seen to be an issue but we dont know when we are going to fix it or if we even will fix it"
Mine is the one with the Apple Trojan in the pocket
Biting the hand that feeds IT
