3 ms·

Asahi Lina (one team member) recently got a 6 figures paycheck from Apple through their bug bounty program for CVE-2022-32947 https://news.ycombinator.com/item?

Asahi Lina (one team member) recently got a 6 figures paycheck from Apple through their bug bounty program for CVE-2022-32947 https://news.ycombinator.com/item?id=37543664 https://news.ycombinator.com/item?id=37543664 This is actually the best of both world, they stay independents, they get paid, Apple fixe the reported exploit.

WaffleIronMaker 3y ago
More information: Here's the clip where Asahi Lina says she received $150,000 for CVE-2022-32947: - https://youtu.be/hDek2cp0dmI?t=11451 https://youtu.be/hDek2cp0dmI?t=11451 And Apple credited them under GPU Drivers for macOS Ventura 13: - https://support.apple.com/en-us/HT213488#:~:text=CVE%2D2022%2D32947%3A%20Asahi%20Lina%20(%40LinaAsahi) https://support.apple.com/en-us/HT213488#:~:text=CVE%2D2022%... Related coverage: - https://secry.me/explore/news/cve-2022-32947-first-critical-security-vulnerability-discovered-by-a-vtuber-named-asahi-lina-in-macos/ https://secry.me/explore/news/cve-2022-32947-first-critical-... - https://nvd.nist.gov/vuln/detail/CVE-2022-32947 https://nvd.nist.gov/vuln/detail/CVE-2022-32947