6 ms·
Google Hacker Asks Tim Cook to Donate $2.5M in Unpaid iPhone Bug Bounties
- SonnyWortzik 8y agoIf that is in fact true, and these bugs have been reported and fixed. All I expect in response from Tim is just a simple, "Done!".
- maym86 8y agoDo you actually expect that? I expect them to just ignore it or respond with some excuse or reason why they won't pay.
- SonnyWortzik 8y agoWith all the bullshit Tim talks about integrity, I don't expect anything less. Then again, I called it bullshit.
- londons_explore 8y agoI suspect the reason Ian hasn't claimed the bounties himself is because Project Zero has very specific disclosure rules. Once reported, a vulnerability gets released to the public in 90 days, even if unfixed for example. Part of the requirements for joining apples program is probably to agree not to disclose vulnerabilities at all once discovered. It makes sense when you think about it. Google pays Ian a salary to find bugs and treat them the way project zero wants. If Ian went to Apple, they would pay him a reward to treat the bugs the way they want. Trying to claim both is double-dipping.
- Rotdhizon 8y agoI didn't see it explained, is this saying that Apple owes this person 2.5 million in bug bounties? Did they refuse to pay, did he decline payment, or what?
- linkmotif 8y agoGuessing as a Google employee paid salary to do this, his deal precludes him from collecting from Apple.
- VikingCoder 8y ago"Apple’s iPhone is one of the most—if not the most—secure consumer device on the planet." Really?
- paulcole 8y agoCan you give a counter-example? In the same product class what is more secure?
- oliwarner 8y agoIt doesn't say "same product class". It doesn't even stipulate consumer electronics, let alone networked consumer electronics. My toaster is more secure.
- scottlamb 8y agoThey might be confusing effort with results. From that perspective, the iPhone had tons of security, and your toaster presumably has none. Or maybe they wanted you to assume they meant within its product class.
- paulcole 8y agoI don't think they meant in comparison to my pet rock.
- VikingCoder 8y agoThen they should have compared it to other phones. Not to other "consumer devices".
- lawnchair_larry 8y agoYes, really.
- Artemis2 8y agoRecommended read: https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf
- Finjoye2018 8y agoFinally they found the way in, as Goolge always do