3 ms·
From my point of view, the fact that the exploit required either to run as root on a rooted device (or alternatively direct access to an internal serial bus) is
by NovemberWhiskey 4y ago
From my point of view, the fact that the exploit required either to run as root on a rooted device (or alternatively direct access to an internal serial bus) is enough to justify not paying at the top level.
These things should probably be more transparent, but I would assume the $1M level would be for exploits that could be deployed on a fresh-from-the-box device with no rooting/mods.
- medo-bear 4y agois isb access an issue? your phone could get stolen
- NovemberWhiskey 4y agoSure; but it's a sliding scale, right? Zero-click network exploits are more severe than interactive exploits are more severe than those which require physical access etc.