"Hey Siri" support and possibly wireless charging case alongside AirPower charging mat.
Apple Launches Bug Bounty Program, Offers Up to $200,000 for Software Vulnerabilities Discovered
At today's Black Hat Conference, an annual event designed for the global InfoSec community, Apple's head of security engineering Ivan Krstic announced the launch of a bug bounty program that will see Apple paying money to individuals who discover major bugs and security flaws in the company's software.
Many major technology companies like Google and Microsoft offer bug bounty programs to encourage people to discover and report major vulnerabilities, but until now, Apple has declined to provide a similar program.
According to TechCrunch, Apple's new bug bounty program is part of Apple's effort to open up to hackers, researchers, and cryptographers who want to help improve the company's security.
Apple will be offering bounties of up to $200,000 to researchers depending on the vulnerability that's discovered. Secure boot firmware components will earn $200,000 at the high end, while smaller vulnerabilities, like access from a sandboxed process to user data outside of the sandbox, will earn $25,000.
The program will be invite only for the time being, limited to a few dozen researchers. Apple plans to make it more open as it grows, and if a non-member discovers a significant bug, they'll be invited to the program.
Many major technology companies like Google and Microsoft offer bug bounty programs to encourage people to discover and report major vulnerabilities, but until now, Apple has declined to provide a similar program.
At #BlackHat2016, Apple just announced a new Security Bounty program and has promised to prioritize pushing updates. pic.twitter.com/1jXW1tNMrb
— Jay Freeman (saurik) (@saurik) August 4, 2016
According to TechCrunch, Apple's new bug bounty program is part of Apple's effort to open up to hackers, researchers, and cryptographers who want to help improve the company's security.
Apple will be offering bounties of up to $200,000 to researchers depending on the vulnerability that's discovered. Secure boot firmware components will earn $200,000 at the high end, while smaller vulnerabilities, like access from a sandboxed process to user data outside of the sandbox, will earn $25,000.
Although each category of vulnerability maxes out at the given rate, Apple will determine the exact reward amount based on several factors: the clarity of the vulnerability report; the novelty of the problem and the likelihood of user exposure; and the degree of user interaction necessary to exploit the vulnerability.Apple plans to launch its new bug bounty program in September. To be eligible for a reward as part of the program, researchers will need to provide proof-of-concept on the latest versions of iOS and the company's newest hardware. Apple will also encourage researchers to donate their earnings to charity and will match all bug bounty donations.
The program will be invite only for the time being, limited to a few dozen researchers. Apple plans to make it more open as it grows, and if a non-member discovers a significant bug, they'll be invited to the program.
[ 82 comments ]
Top Rated Comments
(View all)
30 months ago
I discovered a bug in Apple's Mac update schedule. The Mac never seems to update. Can I collect $200,000?
30 months ago
I discovered a bug in Apple's Mac update schedule. The Mac never seems to update. Can I collect $200,000?
And that's why its invite only...
30 months ago
$200,000 is a great incentive to help detect these issues. Hopefully it's successful.
30 months ago
The incredibly buggy new OS releases shows that Apple is no longer capable of doing it in-house - going the OUTSOURCING route.
Not quite, doesn't matter how many gifted employees you have in-house you'll never catch everything. A familiar work environment breeds a familiar way of thinking, sometimes you need someone to take a look at code from a completely different perspective and it's amazing what can be spotted hiding in plain sight. Happens in all walks of life.
Increasing the number of eyes on their systems with a financial incentive is a really efficient and effective way of catching security flaws.
30 months ago
Can no longer do it in-house - going the OUTSOURCING route.
Oh come on... Most other companies "outsource" it... Its smart business.
30 months ago
Great idea. iOS will always be more secure than Android, and this will only further that gap.
30 months ago
They can't even get stability right...maybe that power point will end up with "error...ppt slide reloaded."
Apple is now outsourcing.....rewarding hackers to protect the company's reputation.
Oh joy, somebody who doesn't understand how programming works or why bug bounties are out there.
30 months ago
Shame Apple's own workers don't know how to fix bugs. You'd think they'd be paid to fix them.
It sure is popular to hate on iOS developers these days without putting any real thought into it. Congrats.
30 months ago
The end of jailbreaking
And if it means a more secure device, I don't know why anyone would be against it.
[ Read All Comments ]
Tap, the company behind the futuristic Tap wearable keyboard, today announced the launch of a new TapAcademy app for iOS that's designed to make it easier to learn to use the keyboard.
Tap...
Verizon today announced the launch of a new "My Numbers" feature designed to let you add up to four additional numbers to a smartphone with unlimited calling and texting, for a total of five...
For this week's giveaway, we've teamed up with SANDMARC, a company that makes camera lenses for the iPhone, to offer MacRumors readers a chance to win a kit that includes a set of Pro...
Popular weather app Weather Atlas, made by Contrast and Agile Tortoise, today received a major 2.0 update that adds new functionality and a new look to the app.
With the 2.0 update, Weather...
Anki has been making toys that use artificial intelligence for years now, starting with the Anki Overdrive set of racing cars and the interactive Cozmo toy robot, but this year the company launched...
Mophie recently announced the launch of its largest battery pack yet, the Powerstation 3XL, which is designed for charging Apple's line of MacBook and MacBook Air devices.
The Powerstation...
Apple today seeded the third beta of an upcoming macOS Mojave 10.14.2 update to developers, one week after seeding the second beta and two weeks after releasing the macOS Mojave 10.14.1 update.
...
Apple today seeded the third beta of an upcoming tvOS 12.1.1 update to developers for testing purposes, one week after releasing the second tvOS 12.1.1 beta and two weeks after releasing tvOS 12.1.
...
