3 ms·

Paying $1,000 for low-impact issues is a nice move which might make me contribute to their program again.

• lapcat 1y ago
  Don't bother. They'll find an excuse to pay $0. This is all at Apple's inscrutable discretion.
  • agos 1y ago
    aren't all bug bounty program at the sponsor's inscrutable discretion?
    • lapcat 1y ago
      Yes, but Apple tends to be more inscrutable than anyone else.
  • nwellnhof 1y ago
    At least it seems that they won't assign CVE IDs and credit researchers without compensating them at all (which is what happened when I reported CVE-2024-27811, for example): > We want those researchers to have an encouraging experience — so in addition to CVE assignment and researcher credit as before, we will now also reward such reports with a $1,000 award.
• general1465 1y ago
  [flagged]