Apple Confirms iPhone Hacking Reward Of $1.5 Million; opens public bug bounty program

guest · Dec 20, 2019

Apple Confirms iPhone Hacking Reward Of $1.5 Million
December 20, 2019
https://www.forbes.com/sites/daveyw...confirms-iphone-hacking-reward-of-15-million/

It was back in August 2019 that Apple announced it was giving security researchers special iPhones to help them find security vulnerabilities. Apple also said that the previously invite-only bug bounty program would become open to all ethical hackers later in the year.

It's now much later in the year, and the doors to that program have finally been swung open. If you can hack an iPhone the bounties on offer are genuinely mind-boggling: Apple has confirmed a $1.5 million (£1.1 million) reward for the best hackers who find the most serious of security flaws.

They can also cause chaos if used in the wild, and nation-state sponsored Advanced Persistent Threat (ATP) attack teams are most notorious in this regard.
Now Apple is seeking to address the balance by opening its bug bounty hunter program to a broader audience this week.
Click to expand...

guest · Dec 20, 2019

Apple opens public bug bounty program, publishes official rules
December 20, 2019
https://www.zdnet.com/article/apple-opens-public-bug-bounty-program-publishes-official-rules/

APPLE PUBLISHES OFFICIAL RULES
To make it official, Apple has also published a new page on its website today detailing the bug bounty program's rules, along with a breakdown of the rewards researchers stand to earn per the exploits they submit.
The rules are pretty strict and set a high bar for earning the top rewards.
Apple will also pay a 50% bonus for regression bugs. These are bugs that Apple previously patched in older versions of its software, but they've been accidentally reintroduced in the code at a later point.

Vulnerabilities that allow for zero-click or one-click attacks are the ones that will bring researchers top money; however, Apple demands a full exploit chain for these types of submissions.

"As a few have noted, the bar is set pretty high in terms of deliverables," Patrick Wardle, Principal Security Researcher at Jamf and an Apple security expert, told ZDNet today.
Below the video is an image of payouts Apple is willing to provide to security researchers [source].
Click to expand...

Log in or Sign up

Apple Confirms iPhone Hacking Reward Of $1.5 Million; opens public bug bounty program

guest Guest

guest Guest

Log in or Sign up

Apple Confirms iPhone Hacking Reward Of $1.5 Million; opens public bug bounty program

guest Guest

guest Guest

Useful Searches