Nice, thanks! I forgot that 404 Media is paywalled.

Main content is that Apple has been jerking around this security researcher for about a year, and they finally gave up and talked to 404 Media. They didn't disclose the vuln itself but they did demonstrate it with the reporter's account.

For the time I supervised, I told people to get the basics right before the glitter. Tried to do that myself, mostly successfully.

Again, they're spending on the glitter, and not the BORING basics.