Trixology

General Category => General Computing/Macintosh => Topic started by: xairbusdriver on August 09, 2016, 03:36:00 PM

Title: Some details on Apple's "Bug Bounty"
Post by: xairbusdriver on August 09, 2016, 03:36:00 PM

Actually heard about this on NPR last week! Not my normal "Apple news" source. :) Here is a blog that provides some details about the program that is currently limited to iOS^? and iCloud^?.

Thoughts on Apple?s Bug Bounty Program (https://securosis.com/blog/thoughts-on-apples-bug-bounty-program)
by TidBITS Security Editor Rich Mogull

Title: Re: Some details on Apple's "Bug Bounty"
Post by: WCDev on August 09, 2016, 08:55:09 PM

That secure boot-loader one is tempting :)

Title: Re: Some details on Apple's "Bug Bounty"
Post by: xairbusdriver on August 09, 2016, 10:00:01 PM

Go for it! [cheer]

BTW, Welcome bAoCK, Stu!

Title: Re: Some details on Apple's "Bug Bounty"
Post by: xairbusdriver on August 11, 2016, 06:38:55 PM

Apple not offering enough? How about $500,000?

The initial Zero-Day hitlist includes maximum bounties of US$500,000 for Apple iOS exploits and US$125,000 for Microsoft Edge exploits.
<[color="blue"]Exodus Intelligence Announces New Acquisition Program
for Both Zero-Day and N-Day Vulnerabilities in iOS[/color] (http://"https://blog.exodusintel.com/2016/08/09/exodus-announces-new-acquisition-program-for-both-zero-day-and-n-day-vulnerabilities/#more-1232")>

Title: Re: Some details on Apple's "Bug Bounty"
Post by: xairbusdriver on August 11, 2016, 06:42:16 PM

Apple not offering enough? How about $500,000?

"... The initial Zero-Day hitlist includes maximum bounties of US$500,000 for Apple iOS exploits and US$125,000 for Microsoft Edge exploits...."
<Exodus Intelligence Announces New Acquisition Program
for Both Zero-Day and N-Day Vulnerabilities in iOS (http://"https://blog.exodusintel.com/2016/08/09/exodus-announces-new-acquisition-program-for-both-zero-day-and-n-day-vulnerabilities/#more-1232")>