3 ms·
And finding these bugs of comparable severity isn't worth the $250k each time? I can easily see the iCloud photo worming one making it's way into mainstream me
by stirlo 6y ago
And finding these bugs of comparable severity isn't worth the $250k each time?
I can easily see the iCloud photo worming one making it's way into mainstream media and causing millions of dollars of reputational damage.
- tptacek 6y agoIt's not a question of whether any spot assessment is worth $250k (though: Apple can get a sitewide pentest from experts for substantially less than that). It's a question of whether paying that continuously is worth it, or whether that many can be spent more productively on something else. For what it's worth, "reputational damage" has always been a kind of rhetorical escape hatch from arguments that have become too mired in facts.