This doesn't prove that he was the one who discovered the bug. Why did it take him 6 months after the patch was released to release any details?

It's quite possible that he just reversed the patch in order to create the tool that he demonstrated.

There were a lot of claims at the time that he had a working exploit against the built-in Macbook driver. http://blog.washingtonpost.com/securityfix/2006/08/the_macbook_wireless_exploit_i.html

is one example of this.

Why did he only demonstrate a panic this time and not a code execution exploit?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11445/34361#34361