Apple Officially Announces Bug Bounty Program Covering All of Its Software

Post by _bxg1 » Fri, Dec 20, 2019, 3:04 PM UTC

rvz wrote: post #8

Just imagine if those iBoot exploits were all reported for cash to Apple. Essentially we get less freedom from our devices to do whatever with them. Apple's bug bounty announcement is just a response to tighten up their walled garden. You'd think that macOS will be as limited as a desktop `OS like iOS and iPadOS is. I admired the pirate vs navy culture Apple had in the past, but now they are neither and now become an…

Post by harikb » Fri, Dec 20, 2019, 3:45 PM UTC

Post by krisoft » Fri, Dec 20, 2019, 3:50 PM UTC

harikb wrote: post #14

harikb wrote: post #13

Considering these bug bounty programs are the most economical way to hire white hat talent, what took them so long? Why isn’t every company doing it? The only reason I can think of is that they haven’t done a decent QA of their own system and afraid of resulting embarrassment.

“ Apple says it will add a 50 percent bonus on top of the standard payout for bugs found in beta software, which allows the company to nix the issue before the OS version goes public. It is also offering the same bonus for so-called "regression bugs"” Quite interesting their treatment of beta. I would have thought reverse.

Post by azinman2 » Fri, Dec 20, 2019, 4:06 PM UTC

rvz wrote: post #8

Just imagine if those iBoot exploits were all reported for cash to Apple. Essentially we get less freedom from our devices to do whatever with them. Apple's bug bounty announcement is just a response to tighten up their walled garden. You'd think that macOS will be as limited as a desktop `OS like iOS and iPadOS is. I admired the pirate vs navy culture Apple had in the past, but now they are neither and now become an…

Post by tyingq » Fri, Dec 20, 2019, 4:17 PM UTC

elliekelly wrote: post #16

Any idea why Apple Pay is specifically excluded?