3 ms·
If that is in fact true, and these bugs have been reported and fixed. All I expect in response from Tim is just a simple, "Done!".
by SonnyWortzik 8y ago
If that is in fact true, and these bugs have been reported and fixed. All I expect in response from Tim is just a simple, "Done!".
- maym86 8y agoDo you actually expect that? I expect them to just ignore it or respond with some excuse or reason why they won't pay.
- SonnyWortzik 8y agoWith all the bullshit Tim talks about integrity, I don't expect anything less. Then again, I called it bullshit.
- londons_explore 8y agoI suspect the reason Ian hasn't claimed the bounties himself is because Project Zero has very specific disclosure rules. Once reported, a vulnerability gets released to the public in 90 days, even if unfixed for example. Part of the requirements for joining apples program is probably to agree not to disclose vulnerabilities at all once discovered. It makes sense when you think about it. Google pays Ian a salary to find bugs and treat them the way project zero wants. If Ian went to Apple, they would pay him a reward to treat the bugs the way they want. Trying to claim both is double-dipping.