Apple Confirms $1M Reward for Anyone Who Can Hack an iPhone

Post by ApplePRScam » Sun, Aug 11, 2019, 12:34 AM UTC

Post by onetimemanytime » Sun, Aug 11, 2019, 6:12 AM UTC

tptacek wrote: post #198

shellcoder wrote: post #162

Earlier quoted context omitted.

Reputation plays a big part in it on both sides. Most buys are not Zerodium and putting themselves out there as buyers. So, there is a certain degree of vouching that happens as someone introduces a buyer to a seller. So, when either party violates the agreement, it reflects poorly on that person who made the introduction, making it harder for them to make those connections in the future. And, these introductions mat…

What's interesting to me about this --- and I've got no firsthand knowledge of the markets --- is that Apple doesn't have to outbid brokers; a broker could offer 50% more than Apple, but that comes with an X% uncertainty penalty. You can sell to Apple and pocket $1MM, or try to structure a deal for $1.5MM and gamble that the bug will survive. I'm betting that's often not a good deal; the lump sum payment is the bette…

Post by diminoten » Tue, Aug 13, 2019, 10:46 PM UTC

lawnchair_larry wrote: post #31

diminoten wrote: post #8

Earlier quoted context omitted.

I forget who, but someone made a comment about this a long time ago that stuck with me. We often say, "They'll just sell all these 0 days on the black market." but honestly that's not like a literal market, and you have to make a lot of compromises to not only your own integrity, but also to your safety and ability to stay out of jail if you do something like that. I wish I remembered the specifics of the comment, bu…

Selling bugs and exploits is not illegal just about everywhere, so there is really no risk. Plus, law enforcement and intelligence agencies, or their contractors, are the ones buying on the “black market”. Nobody has to worry about jail for knowing about a mistake that Apple made in their code and telling someone else.

Post by nickpsecurity » Thu, Aug 15, 2019, 5:35 PM UTC

grugq wrote: post #235

donkeyd wrote: post #213

Earlier quoted context omitted.

> I was projecting sales of $1M over the year. At 15% commission that would be $150k. That's a pretty big difference indeed, that's more like a normal SV salary than a 'live for ever in Thailand' amount of money.

Yes. It is less than any salary I could make at a company if I could get a job. But that article was a career limiting move. C’est la vie. Never talk to reporters unless you have a specific reason to. Definitely don’t talk to reporters who burn their sources. I understand that he is writing a book now, and I doubt many insiders will speak to him. I don’t expect it to be very accurate. I had a lot of problems because…