COIT11223 IT and Soicety

Imagine you're an experienced software developer. In the process of building your new app, you’ve discovered a vulnerability in the latest version of the Apple iOS operating system that gives anybody remote access to the device as a superuser (able to make any changes they would like). Panicked, you send an e-mail to Apple CEO Tim Cook about the vulnerability but after around a week, have yet to receive a reply. You worry that somebody else will find the same bug, so plan to wait another 48 hours and then tweet directly to the Apple twitter account about this vulnerability to draw attention to it so that it can be fixed. You know enough to know that this is considered “full disclosure” in security circles, but think it might be the only way to get Apple to listen. However, you’re not sure whether this a good idea, and decide to use the ACS code of professional conduct to consider whether you should do this or not, particular in relation to the social and ethical implications of this vulnerability.

Answer all of the following sub-questions based on the above scenario.

(a) If you decide to tweet about the vulnerability, explain who will benefit from your decision, and how they may benefit?

(b) If you decide to tweet about the vulnerability, explain who will be harmed by your decision, and how they may be harmed?

(c) Assuming you are a member of the Australian Computer Society (ACS), how may the ACS Code of Professional Conduct impact on your decision? Use the ACS Code of Professional Conduct (included) to analyse this scenario and come to a conclusion.