4 ms·

Is Android just so good there are no major vulns anymore? Does Apple have a comparable program? I don't see a reference in the Apple materials about any bount

Is Android just so good there are no major vulns anymore? Does Apple have a comparable program? I don't see a reference in the Apple materials about any bounty reward program for Apps vulnerabilities [1]. If this is true, then Google was going above and beyond and is now simply reverting to the mean so they can reduce any potentially excess financial spend. Maybe they don't actually care so much about their users after all? If they were shifting the limited funds to a more effective vehicle, they missed the prime opportunity to mention it (tongue in cheek, because Elgoog doesn't have real resource constraints). [1] https://security.apple.com/bounty/categories/ https://security.apple.com/bounty/categories/

zorgmonkey 2y ago
They still have the bug bounty for the Pixel devices. I don't know they ever had one for the open source Android OS (AOSP), but a bug in AOSP would be likely to effect a Pixel device. The bug bounty that is getting removed is one that google offered for certain very popular apps in the play store. I also see that have bug bounty's for some of the main Google android apps. https://bughunters.google.com/about/rules/android-friends/6171833274204160/android-and-google-devices-security-reward-program-rules https://bughunters.google.com/about/rules/android-friends/61... https://bughunters.google.com/report/targets/290590452 https://bughunters.google.com/report/targets/290590452
UncleMeat 2y ago
Apple never had a comparable program. This was a program finding vulns in non-Google apps on Play. A cool idea, but I suspect challenging to operate without teeth making the developers actually update their apps.