this post was submitted on 10 Jun 2024
479 points (100.0% liked)

Technology

69658 readers
2631 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
479
Apple refused to pay bounty to Kaspersky for uncovering vulnerability in 'Operation Triangulation' - 9to5Mac (9to5mac.com)
submitted 10 months ago by [email protected] to c/[email protected]
44 comments fedilink hide all child comments
 
  • Kaspersky uncovered iOS vulnerabilities in 'Operation Triangulation', reported to Apple, but was refused bounty payment
  • Apple's Security Bounty Program offers rewards up to $1 million for discovering vulnerabilities to prevent them from being sold on the dark web
  • Apple's refusal to pay Kaspersky could be due to restrictions on financial transactions with companies in sanctioned countries like Russia.
all 49 comments
sorted by: hot top controversial new old
[–] [email protected] 246 points 10 months ago (4 children)

Apple Security Bounty awards may not be paid to you if you are in any U.S. embargoed countries or on the U.S. Treasury Department’s list of Specially Designated Nationals, the U.S. Department of Commerce Denied Person’s List or Entity List, or any other restricted party lists.

Kaspersky can whine all they want. Russia is embargoed. They're not getting their money.

Kaspersky is a good company doing good work in the cyber security space. Unfortunately, because of the embargo, they may have to turn to the black market to sell future exploits. Or maybe not; I'm not totally sure what kind of ethical standards they have.

[–] [email protected] 66 points 10 months ago (1 children)

Yeah sorry guys, did you forget you work for an asshole?

[–] [email protected] 89 points 10 months ago (1 children)

Apple could have tried to work with them and said something like "We'll pay when the embargo ends", since now Kapersky has every reason to sell their next apple exploit on the black market.

They've just turned a department of people successfully working to make apple more secure into a department of people working to make it less secure.

[–] [email protected] 66 points 10 months ago (2 children)

Apple could have tried to work with them and said something like "We'll pay when the embargo ends"

.....aaaaand that would most likely be trying to circumvent the sanctions by essentially receiving credit from Kaspersky on delivered services.

Not saying the situation is optional, but the sanctions would be extremely toothless if it was that easy to circumvent.

[–] [email protected] 26 points 10 months ago (2 children)

How is holding the money until (and if) the sanctions are lifted, "circumventing"?

However unlikely it would be, if the sanctions are lifted (maybe Russia gets a new, sane Government, calls off its invasion, stops its international shenanigans), wouldn't it be OK to pay this company then?

[–] [email protected] 25 points 10 months ago (2 children)

It would still probably count as some sort of trade (even when delayed), which is what would violate the sanctions.

[–] [email protected] 2 points 10 months ago

It could be argued that such delayed trade should be encouraged. Let Apple's debt to Kaspersky build up, with interest, but it'll only be paid once sanctions end which will only happen once pre-determined conditions are met. It's basically an increasing incentive to change course in a way that will result in sanctions being lifted.

There are probably some pretty severe downsides to this approach though.

[–] [email protected] 1 points 10 months ago

If the point of the embargo is to pressure affected parties to enact change on the governments policies, offering the reward after sanctions are lifted would be an added incentive.

It should be allowed or even encouraged to help the power of the sanctions.

[–] [email protected] 15 points 10 months ago

In many cases it's doing business and not just the payment!/compansation that the sanctions is about.

[–] [email protected] 7 points 10 months ago (2 children)

They are extremely toothless in the sense of making continuation of the war less interesting.

Russian oil\gas\etc revenues have grown.

What the sanctions have hurt are mostly many smaller businesses and individuals. Well, big companies too, but that just makes them more dependent on state support. Which is a win for the Russian government.

Kaspersky is definitely an FSB-friendly company.

But still, most people hurt by sanctions are innocent. Well, less guilty than European politicians profiting from cooperation with Russia both before and after 2022, and remember how all those "free democratic" countries claimed Russian elections were legit when having Putin in Russia seemed to have no downsides, despite mass protests.

[–] [email protected] 11 points 10 months ago (1 children)

They are extremely toothless in the sense of making continuation of the war less interesting.

If it was "toothless", Putin and his propaganda machinery wouldn't bother commenting on it so often.

[–] [email protected] 2 points 10 months ago (1 children)

I don't watch TV, but I've gotten the impression that for the last 2 years or so they've been talking less and less about sanctions. Which would make your idea of how this works consistent in a wrong fucking way.

[–] [email protected] 7 points 10 months ago (2 children)

You have an impression about what they don't talk about on TV based on that you don't watch TV?

[–] [email protected] 1 points 10 months ago (2 children)

Based on the fact that they've accomplished almost nothing tells me they are toothless, personally.

Ratchet them way the fuck up.

[–] [email protected] 2 points 10 months ago

Just curious... What are your expectations for sanctions that have been in effect for a year or so?

[–] [email protected] 1 points 10 months ago (1 children)

Based on the fact that they’ve accomplished almost nothing tells me they are toothless, personally.

Eh, I've accomplished a few of the things which were my plan for all of my life, so now I don't know what to do anymore with those branches, so to say.

More important, why are you so butthurt? Relax, it's just a shitfest in the interwebs. We all get back to tea and work and our pets and hobbies and relatives and friends from it.

[–] [email protected] 2 points 10 months ago* (last edited 10 months ago) (1 children)

Why in the world would you think I was talking about what YOU accomplished...? Or that I'm butthurt about anything except how toothless and ineffective the Russian sanctions have been on their main goal - which was to stop the constant murder of Ukrainians?

"Toothless" was referencing Russian sanctions, that part of the conversation didn't suddenly shift to focus on you.

[–] [email protected] 2 points 10 months ago

My bad. I think I saw the word "he" there. Agree on the sanctions, but I think their main goal was to insulate Russia and not prevent murder. Since the latter would be less about payments in Steam becoming pita and more about Russian gas and oil not getting to Europe in any form, laundered through Azerbaijan or something else too.

[–] [email protected] 1 points 10 months ago

Google the word "sample".

Also we live in the society, don't you know? When some old lady repeats stuff about Zelensky being a drug addict or a dumb joke about democracy in Ukraine, you know it's not her own thoughts.

Point being - last time I heard anybody talk about sanctions like that, out of nowhere with bullshit mixed in, was more than a year ago.

[–] [email protected] 9 points 10 months ago* (last edited 10 months ago) (1 children)

[many citations needed]

Also, you seem to be putting the actions of Putin (and the consequences of allowing him to get the country to this state) on to Europe and NATO. The fact is that these sanctions would not be in place if Putin didn't invade a neighboring country for illegal annexation (specifically, Russia violated United Nations Charter Article 2, paragraph 4).

I'm sorry to tell you that mass protests aren't enough. As long as the Russian people are complicit (for example, by continuing to contribute to war efforts at their oil refinery jobs) and continue to allow Putin to govern, they will suffer.

[–] [email protected] 5 points 10 months ago (1 children)

Also, you seem to be putting the actions of Putin (and the consequences of allowing him to get the country to this state) on to Europe and NATO.

I'm definitely putting it on Europe and NATO to act like some protector of democracy and then confirm Putin's "elections" while there were widespread protests ongoing, and now when that criminal unelected regime they criminally supported invades another country, to blame people who've done their part to prevent it.

I’m sorry to tell you that mass protests aren’t enough. As long as the Russian people are complicit (for example, by continuing to contribute to war efforts at their oil refinery jobs) and continue to allow Putin to govern, they will suffer.

No, victims are not complicit in crimes even if being exploited to help those. You should be sorry for being a cheat.

Also I still expect your justification or apology for western governments which confirmed Putin's "elections". Until then any word of a westerner on this matter is worth less than a bowl of piss.

[–] [email protected] 2 points 10 months ago (1 children)

Only the Russian people can fix the elections. NATO and the EU have nothing to do with that, so I'm not sure why you're blaming them for "confirming" it when the only people that "confirmed" it were the Russian people who rolled over for yet another false election.

So you are owed no apology from NATO, and I certainly don't owe you one.

[–] [email protected] 3 points 10 months ago

bowl of piss

[–] [email protected] 2 points 10 months ago

Kaspersky also has a bunch of US-based subsidiaries or partners they're selling their software through. Or Apple could have just escrowed their reward until the embargo was over.

[–] [email protected] 1 points 10 months ago

Who/what are on those other lists.

[–] [email protected] 179 points 10 months ago (1 children)

"Apple refuses to send money to security company inside of embargoed country, to maintain compliance with USA law."

[–] [email protected] 3 points 10 months ago

Security company which is most likely controlled by the Kremlin

[–] [email protected] 35 points 10 months ago

"refused". Okay, headline.

[–] [email protected] 22 points 10 months ago (1 children)

Should've just sold on black market . Better luck next time .

[–] [email protected] 15 points 10 months ago (1 children)

You trusted me? You fucking idiot. -Tim Apple

[–] [email protected] 12 points 10 months ago* (last edited 10 months ago) (1 children)

What has trust go to do with anything. Apple cannot pay them due to sanctions. There is nothing to indicate they don't want to pay them, they are just legally not allowed to do so.

[–] [email protected] 4 points 10 months ago

So do something else. Or indicate you will pay them when it is legal to do so. Kapersky's guy recommended Apple donate the bounty to a charity.

[–] [email protected] 21 points 10 months ago

„Apple doesn’t want to send money to russia which is also illegal”

News 2024

[–] [email protected] 5 points 10 months ago

Just pay them, Apple.