4 ms·

The biggest thing IMO is for security research, given the intense walled garden, it's increasingly required to do any sort of poking around.

snazz 6y ago
If you're a notable security researcher, Apple has the program for you: https://developer.apple.com/programs/security-research-device/ https://developer.apple.com/programs/security-research-devic... That's their "official solution" to the problem, even if it's somewhat exclusionary. For the rest of us, a checkm8'ed iPhone X works great.
- saagarjha 6y ago
  If you're a notable security researcher, there's a good chance that the rules of that program will drive you away from applying.
  - snazz 6y ago
    True! If I remember correctly, Project Zero had this exact issue.
- piracy1 6y ago
  Oh wow I didn't know about that. That's neat. I wonder if it's like a NYC CCW in that in theory you can get one but you cant really. I should try to get one. In theory I tick all the boxes (a bit of a stretch). To be eligible for the Security Research Device Program, you must: Be a membership Account Holder in the Apple Developer Program. I used to be, I could be again. Have a proven track record of success in finding security issues on Apple platforms, or other modern operating systems and platforms. I have a CVE in Signal for IOS, and some embedded device shit. Be based in an eligible country or region.* I am that. Participation is not available if you are: In any U.S. embargoed countries, on the U.S. Treasury Department’s list of Specially Designated Nationals, on the U.S. Department of Commerce Denied Persons List or Entity List, or on any other restricted party lists. I am not that. Under the legal age of majority in the jurisdiction in which you reside (18 years of age in many countries). I am not that. Employed by Apple currently or in the last 12 months.} I am not that.

4 ms·

The biggest thing IMO is for security research, given the intense walled garden, it's increasingly required to do any sort of poking around.

by piracy1 6y ago

snazz 6y ago
If you're a notable security researcher, Apple has the program for you: https://developer.apple.com/programs/security-research-device/ https://developer.apple.com/programs/security-research-devic... That's their "official solution" to the problem, even if it's somewhat exclusionary. For the rest of us, a checkm8'ed iPhone X works great.
- saagarjha 6y ago
  If you're a notable security researcher, there's a good chance that the rules of that program will drive you away from applying.
  - snazz 6y ago
    True! If I remember correctly, Project Zero had this exact issue.
- piracy1 6y ago
  Oh wow I didn't know about that. That's neat. I wonder if it's like a NYC CCW in that in theory you can get one but you cant really. I should try to get one. In theory I tick all the boxes (a bit of a stretch). To be eligible for the Security Research Device Program, you must: Be a membership Account Holder in the Apple Developer Program. I used to be, I could be again. Have a proven track record of success in finding security issues on Apple platforms, or other modern operating systems and platforms. I have a CVE in Signal for IOS, and some embedded device shit. Be based in an eligible country or region.* I am that. Participation is not available if you are: In any U.S. embargoed countries, on the U.S. Treasury Department’s list of Specially Designated Nationals, on the U.S. Department of Commerce Denied Persons List or Entity List, or on any other restricted party lists. I am not that. Under the legal age of majority in the jurisdiction in which you reside (18 years of age in many countries). I am not that. Employed by Apple currently or in the last 12 months.} I am not that.