Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Apple Launches Bug Bounty Program, Offers Up to $200,000 for Software Vulnerabilities Discovered

I hope this is a beginning of a faster response time in correcting reported bugs and security holes than we have seen to date.
 
So if I reveal to them two vulnerabilities they will pay me for both? Or only for just one per year?
 
Security is great and all but let's not forget that we have supported the death of freedom in computing by buying into the iOS model of absolute control by the vendor. I haven't jailbroken in years but I'm happy every time a new jailbreak is found because it means there is some option to rip control back from Apple.

How secure will you feel when Apple starts deleting photos or videos off your iOS device that appear to be in copyright violation?
 
  • Like
Reactions: DanJBS, ackmondual, gotluck and 1 other person
They can't even get stability right...maybe that power point will end up with "error...ppt slide reloaded."
Apple is now outsourcing.....rewarding hackers to protect the company's reputation.
 
So, as Apple's bug reporting is currently closed (that is, people cannot see what bugs have been filed) will the standard response to a bug report be

"Thank you for your bug report. Apple is already aware of this issue and is currently working on a fix. As it is not a new bug it is not eligible for the Apple bounty."
 
  • Like
Reactions: SoSickSadNslOw and DanJBS
How much if you find a critical fault in a watch band?? $500 000?
 
Soba said:
I think this is a great thing and it's about time!

Though considering the quality of Apple's software lately, it's also a great thing that they have such a large cash hoard. :p
Click to expand...
lol. apple literally has billions sitting around. they could afford to add two zeros to each of those bounties and it still would not even effect their bottom line ;)
[doublepost=1470364555][/doublepost]
Twimfy said:
Not quite, doesn't matter how many gifted employees you have in-house you'll never catch everything. A familiar work environment breeds a familiar way of thinking, sometimes you need someone to take a look at code from a completely different perspective and it's amazing what can be spotted hiding in plain sight. Happens in all walks of life.

Increasing the number of eyes on their systems with a financial incentive is a really efficient and effective way of catching security flaws.
Click to expand...
exactly.

reminds me of a bank back in the 90's, they had boasted about their top of the line security system and that they were impenetrable.
for added measure they hired a security analyst to find any flaws in their system they had built around their bank. they themselves claimed there was nothing to find but wanted to be extra safe,
sure enough, a few weeks later the analyst company came back with 3 major flaws. one of them being a 2x2 blind space in the security footage form the cameras, ironically, right by the locked entry way into the back behind the teller booths.
literally 4 square feet of space, not much, but enough for 1-2 people to stand to not be seen by a single camera.

if they had relied on their own in-house security designers, they would have never found it. not nearly the same but a similar concept. when you design something, and you are the one to try and troubleshoot it and find the bugs, you might over look something so completely obvious, simply because you can't comprehend that you would forget it, or let it happen.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back