4 ms·

Don’t love the bounty state here — security researchers, is it typical to wait this long with Apple or other FAANG type companies?

• tptacek 2y ago
  Very yes.
  • factormeta 2y ago
    seems this just encourage researchers to sell zero-day exploits to organize crime and/or alphabet letter agencies. No wonder we have no digital security at all! Big tech don't really care about security or privacy. Why are we even using their stuff?
    • tptacek 2y ago
      It does not. Bounties and zero-day markets are different things. Lots of people actively sell to both.
  • fsflover 2y ago
    And you think this is fine?
    • tptacek 2y ago
      I do, yes.
      • fsflover 2y ago
        https://news.ycombinator.com/item?id=41546343 https://news.ycombinator.com/item?id=41546343