3 ms·
The problem with internal bounties is that you'd be granting them to the people with power to put in the security holes they find.
by astrange 3y ago
The problem with internal bounties is that you'd be granting them to the people with power to put in the security holes they find.
- dragonwriter 3y agoSure, but “internal bounties have fundamental problems of incentives at any scale” is a different problem than “Apple can't afford internal bounties on an adequate scale to compete with nation-state attackers”.
- jonhohle 3y agoApple uses a ton of open source libraries. They could give bounties for security issues found in public releases.