3 ms·
For a long time actually there were TONS of android exploits - either direct android or based on the installers companies put on phones they shipped. That has
by slownews45 5y ago
For a long time actually there were TONS of android exploits - either direct android or based on the installers companies put on phones they shipped.
That has changed massively recently, my sense is rough parity currently (on a clean android phone).
Payouts are still a lot higher per point marketshare for iOS though, so maybe still harder to develop.
- slivanes 5y agoWhy say market share? Exploit payouts per exploit are highest for Android in mobile space: https://zerodium.com/program.html https://zerodium.com/program.html
- slownews45 5y agoNormally if a platform has relative low market share - the value of an exploit is relatively low (ie, 15% market share is pretty low). An android exploit gets you 85% of your market, maybe even more internationally where these get heavily used. Android is about $30K per point market share and iOS is around $130K per point market share (4x more). For example, it's not that Exchange / Outlook are HARDER to get an RCE on that makes the payout so high for those, it's because they have a LOT more usage than something like postfix etc.