51–60 of 107 posts
The question is will they pay $1,000,000 for an exploit that unlocks an iphone? http://www.reuters.com/article/us-apple-encryption-idUSKCN0X...
https://www.zerodium.com/ios9.html
Ever notice, you never see Superman and Clark Kent in the same room? ;)
Earlier quoted context omitted.
Smart move. That's not too shabby of a tax deduction.
I don't understand how the deduction from giving X to a researcher and X to a charity is smarter than just giving X to the researcher?
Earlier quoted context omitted.
I think it's more like Apple is patient and waits to get things right. Bug bounty programs are relatively new (past few years). The article notes that Apple faced a more complicated landscape than your typical company, one where state actors are bidders. So they needed to craft a more targeted program.
This seems like a pretty generic reason that doesn't explain that much. Are state actors not bidders on gmail, android, facebook, firefox, chrome?
Earlier quoted context omitted.
The Reuters report has some details about why they limited it: >Apple said it decided to limit the scope of the program at the advice of other companies that have previously launched bounty programs. Those companies said that if they were to do it again, they would start by inviting a small list of researchers to join, then gradually open it up over time, according to Apple. Security analyst Rich Mogull said that lim…
True, but it's not like Apple doesn't have the resources to manage an open submission program.
Earlier quoted context omitted.
Getting sick of the Apple-bashing. Sad to see it has reached HN, I thought it was bad enough on Reddit.
There's so many fanboys though :'(
And it's a different kind of hate too. Apple fans like to criticize Microsoft and Google, but Apple haters generally attack Apple fans, not Apple itself. It's very disheartening.
Earlier quoted context omitted.
Getting sick of the Apple-bashing. Sad to see it has reached HN, I thought it was bad enough on Reddit.
they deserve all the bashing they are getting
Earlier quoted context omitted.
The Reuters report has some details about why they limited it: >Apple said it decided to limit the scope of the program at the advice of other companies that have previously launched bounty programs. Those companies said that if they were to do it again, they would start by inviting a small list of researchers to join, then gradually open it up over time, according to Apple. Security analyst Rich Mogull said that lim…
True, but it's not like Apple doesn't have the resources to manage an open submission program.
Earlier quoted context omitted.
they deserve all the bashing they are getting
How is this relevant to discussion. This shit ruins the site. At least provide any content to your comment.
Next they need to offer a bounty program for usability issues. iOS needs a lot of love since Forstall got squeezed out.
Can't wait for "We pioneered InfoSec by our first-of-kind innovative bug bounty program" @ next WWDC.
Getting sick of the Apple-bashing. Sad to see it has reached HN, I thought it was bad enough on Reddit.
I don't know why. Personally, I've got devices running the spectrum of OSs and they all have their strengths and weaknesses.