3 ms·

Apple has tons of money, a crazy amount of money, they have a net income of dozens of billions every quarter. They have more money than most state funded agenci

• nicce 5y ago
  > They just don't want to. Do you even know what you are asking? You are asking perfect code and hardware, no single mistake on any line of the process. Taking account on every possible scenario and sidescenario you can’t or can think about.
• jagger27 5y ago
  I strongly suspect you would not be able to find a single Apple employee who says they "don't want to" protect iPhones from NSO malware.
• poisonborz 5y ago
  A lot of commenters point to the heaps of money. But what do you buy with it? How do you build it up at this scale? Security isn't a metric you can reliably work by like clicks, op/s and sales. And beyond a very narrow frame it won't help their case of being a producer of consumer products, rather it makes very difficult to work with state actors.
  • blip54321 5y ago
    Raising bug bounties by an order of magnitude goes a long ways. Apple's program is pretty good relative to industry norms, but all of the programs are well below black/gray market prices for exploits, and most are below costs to find, document, and submit an exploit. Google pays less than a month's salary for their most serious Chrome exploits, for example: https://bughunters.google.com/about/rules/5745167867576320 https://bughunters.google.com/about/rules/5745167867576320 I think all this is good until an adversary decides to brick every iDevice, Android, Windows, MacOS, and Linux machine in the US. And by "brick", I mean overwrite firmwares, disable fans, and run at maximum load.
    • fomine3 5y ago
      I saw bad bug reporting/bounty stories here about Apple. I believe Apple improve this zone without huge investment.