3 ms·
Apple should offer double the bounty in exchange for having these Zero Days reported directly to them.
by wwayer 11y ago
Apple should offer double the bounty in exchange for having these Zero Days reported directly to them.
- celticninja 11y agountil recently the market for these exploits was for jailbreaking. Apple didnt need to pay for the exploit, just wait until it was released and then patch it. Buying the exploit does nothing for them and actually allowing jailbreaks means more people buy iPhones (because they can jailbreak) then they have to decide whether they want new features or jailbreak features. Either way the are in Apple's ecosystem and have paid apple some money. These days the exploits are wanted by companies like Hacking Team or agencies like NSA, I dont see there being too many more free jailbreak exploits being released as a result. edit: Also if Apple doubled their bug bounty they would be paying 2 * $0.00
- dogma1138 11y agoThis isn't your run of the mill jailbreak, this is a proven remote jailbreak that can be automatically triggered by either visiting a website, receiving an SMS or by triggering any of the built in application "magnet links" to qualify for the bounty the exploit most also be interaction free so no interaction other than opening an SMS or clicking on a link is required. So effectively this is a remote code execution exploit that allows you to remotely bypass any restrictions and protections provided by the IOS OS and take full control over the device. You'll probably still see local jailbreaks, that require you to connect the IOS device to a computer and launch the exploits from there manually, Pangu has updated their jailbreak to support IOS 9.0.X already.