Live data from Hacker News

Apple announces bug bounty program

techcrunch.com

61–70 of 107 posts

Re: Apple announces bug bounty program

#61
post #24

Can't wait for "We pioneered InfoSec by our first-of-kind innovative bug bounty program" @ next WWDC.

Couldn't wait for YouTubers to make a video about this or you thought that your comment wouldn't make any difference in a sea of identical mindless comments?

Or if you prefer "thanks, after this I'm going to buy a Nexus 6p"?

Re: Apple announces bug bounty program

#62
post #38
post #36

Earlier quoted context omitted.

I read that as: if you find a bug and report it, you may get invited into the formal bug bounty program (but may not get a payout on the first one). No idea if that's right though.

The Reuters report has some details about why they limited it: >Apple said it decided to limit the scope of the program at the advice of other companies that have previously launched bounty programs. Those companies said that if they were to do it again, they would start by inviting a small list of researchers to join, then gradually open it up over time, according to Apple. Security analyst Rich Mogull said that lim…

Then it seems like a job to me, if it is, then they should pay a salary.

Re: Apple announces bug bounty program

#63
post #56

Earlier quoted context omitted.

they deserve all the bashing they are getting

How is this relevant to discussion. This shit ruins the site. At least provide any content to your comment.

Complaining about a poke at Apple is irrelevant. That's what derailed the thing, not the original comment.

"Someone got offended" is the problem here. Not the alleged offender.

Re: Apple announces bug bounty program

#64
post #56

Earlier quoted context omitted.

How is this relevant to discussion. This shit ruins the site. At least provide any content to your comment.

No, people with no sense of humor ruins everything. It is a good joke, that's why it is top comment.

It's not humor when it always falls to the same side.

Re: Apple announces bug bounty program

#65

Earlier quoted context omitted.

Getting sick of the Apple-bashing. Sad to see it has reached HN, I thought it was bad enough on Reddit.

Yeah but, they do take credit like that. And I'm one of their biggest fans. Edit: oh, the downvotes, not because facts, but because dislike? "He will go through a process of looking at my ideas and say, ‘That’s no good. That’s not very good. I like that one.’ And later I will be sitting in the audience and he will be talking about it as if it was his idea. I pay maniacal attention to where an idea comes from, and I e…

Cherry picking

Re: Apple announces bug bounty program

#66
post #11

Earlier quoted context omitted.

From the article: > However, Apple won’t turn away new researchers if they provide useful disclosures, and plans to slowly expand the program. I'm reading this as: if you find a serious bug and report it, you'll get the money.

I haven't read the article, but I was at the announcement and your take is exactly how it was clarified in the room. If you do good work and report it, you'll get paid accordingly.

That setup doesn't make any sense to me.

Either its an open program or a closed program.

A closed program that allows submissions from others is an open program.

What reasons what they have to do it this way? My first guess is to tick some checkbox.

Re: Apple announces bug bounty program

#67
post #28

I'm a bit surprised, because you'd think that they'd have been doing this already.

Apple has slowly been opening up, they used to be such an incredibly secretive company under Jobs there's no way this would've ever happened. Whoops. I just said "Steve Jobs never would've let this happen" line. Oh well. They're letting in third-party keyboards another extensions, small additions to Siri, releasing actual software on android, it's not too surprising that they might be willing to do this now. Been ver…

There was a time if you had issues with hardware, and email to Steve Jobs actually resulted in a customer escalation. I had one of the 15" MBPs that had the Nvidia chip issue, but never experienced that. But had 3 other problems -- all handled (first time for me with Mac hardware). A polite email on a friday night after I did hit my 4th hardware issue, next trip to the apple store was for a "in kind" based on purchase price replacement.

Apple Software has been suffering for awhile. And where software was involved, he certainly did call teams out for failures, but we also ended up with the path iTunes is on under his watch.

That said, I don't know now, but at a time, an email to Jobs did make things happen.

Re: Apple announces bug bounty program

#68
post #38

Earlier quoted context omitted.

The Reuters report has some details about why they limited it: >Apple said it decided to limit the scope of the program at the advice of other companies that have previously launched bounty programs. Those companies said that if they were to do it again, they would start by inviting a small list of researchers to join, then gradually open it up over time, according to Apple. Security analyst Rich Mogull said that lim…

True, but it's not like Apple doesn't have the resources to manage an open submission program.

[deleted]

Re: Apple announces bug bounty program

#69
post #28

I'm a bit surprised, because you'd think that they'd have been doing this already.

Apple has slowly been opening up, they used to be such an incredibly secretive company under Jobs there's no way this would've ever happened. Whoops. I just said "Steve Jobs never would've let this happen" line. Oh well. They're letting in third-party keyboards another extensions, small additions to Siri, releasing actual software on android, it's not too surprising that they might be willing to do this now. Been ver…

Just for the sake of discussion: Are they opening up because they need to do this to survive? And they need to do this to survive because their products aren't as good as they used to be and they can't live in an enclosed environment?

Re: Apple announces bug bounty program

#70
post #24

Can't wait for "We pioneered InfoSec by our first-of-kind innovative bug bounty program" @ next WWDC.

Getting sick of the Apple-bashing. Sad to see it has reached HN, I thought it was bad enough on Reddit.

I don't see the problem unless you think Apple gets bashed more than Microsoft or Google here.

Do you think Apple gets more than Microsoft on HN? Please read any thread with Microsoft or one of their products in the title and you'll see M$ get bashed every single time. Google gets it too, from plenty of people.

Anyway, they deserve everything they get. Each one of those companies have made large crowds of enemies for various reasons.

Complaining about company bashing in general is fine by me. If you don't like it and you don't want it on HN, then I'm with you. You're just defending Apple though and that comes off as tone deaf and severely biased to me.

In any case, I don't see the mods banning people over a little poke like this. So, if people like it and upvote it then you should probably just counter with a downvote and refrain from commenting and derailing the entire thread like this.

Sorry you got offended. I thought it was funny and relevant.

Post reply on HN