.
/v3-uk/blog-post/2123563/apple-boots-security-researcher-charlie-miller-ios-developer-program
08 Nov 2011, Phil Muncaster , V3
Apple has scored another PR disaster after it kicked a security researcher off its lucrative iOS Developer Program because an app he wrote to demonstrate a security flaw in the firm's operating system broke strict developer guidelines.
As V3 reported earlier today, Charlie Miller discovered a flaw which enables developers to bypass Apple's strict code signing restrictions, potentially allowing a rogue developer to remotely scan pictures and other data on a user's iPhone.
Miller demonstrated the flaw using his own stock price checking application, InstaStock, which he managed to get approved, however Apple chucked him off the developer program when it found out he had broken the rules banning any apps which can download code or which do not perform as advertised.
Unsurprisingly, Miller is a bit miffed, and tweeted to that effect. He has also been banned for a full year.
From Apple's perspective, the firm has sent out a clear signal that it will not tolerate developers breaking its inviolable guidelines, but it has also shot itself in the foot slightly in discouraging well-meaning security researchers from interfering with its platform with the aim of making it better.
Apple is of course well known for its superior - in terms of security - platform. Could it be the top brass at Cupertino reckon they don't need the help of researchers like Miller? More fool them if they do.
Do you agree?
Idiot
Miller is a prat. Now I know I will certainly make sure I never buy an App which he is "related" to!
Posted by Riobin, 11 Nov 2011