That last comment was me btw, forgot to add my name. Yea everything has holes just waiting to be discovered. The number of times that I have audited a package and found not a single bug could be counted on a single hand. Relatively few have been auditing OSX kernel code, that's why there are few by comparison. I guess you have somewhat of a point there regarding a resume. Still I can't imagine anyone wasting their 0day for that; I sure wouldn't.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/158/776#776