A response to AT&T’s letter — We have an iPad exploit and all iPads are vulnerable.
A response to AT&T’s letter — We have an iPad exploit and all iPads are vulnerable. So, AT&T calls us malicious in their letter to their customers . I think this calls for a statement to clear the air. AT&T had plenty of time to inform the public before our disclosure. It was not done. Post-patch, disclosure should be immediate– within the hour. Days afterward is not acceptable. It is theoretically possible that in the span of a day (particularly after a hole was closed) that a criminal organization might decide to use an old dataset to exploit users before the users could be enlightened about the vulnerability. Even in this disclosure, which I feel they would not have made if we hadn’t publicized this vulnerability, AT&T is being dishonest about the potential for harm. I had previously thought that only an attacker who could crack the secret Ki key (I believe but am not certain that David Hulton and Skyper could based on information I have received about