(Aug 9, 2019 11:57 AM)Omniscient Wrote: Yes, which is why them upping the money is important. Forbes reports that hackers selling to governments get $1m+ for these type of exploits. I suppose Apple decided it has to pay equally as much. Which is crazy if you think about that. There is now a bidding war for high-end valuable exploits by Apple, Government Agencies, and criminals.
It's a strange thing to think about but I guess on their end it's better they know about it first instead of trying to play the damage control game after the exploit has been out for X amount of days/months.
I heard about this on Linus tech news and was thinking I should learn how to find exploits in apple.
Sue Corellium
Bug bounty program
you choose one in my world
Meanwhile, Valve is lowering their paychecks for certain exploits:
https://hackerone.com/valve/policy_versi...ge=3616941
DO NOT DEAL WITH THIS MEMBER
(Aug 25, 2019 06:18 AM)MavenGradle Wrote: Meanwhile, Valve is lowering their paychecks for certain exploits:
https://hackerone.com/valve/policy_versi...ge=3616941
valve is going to get fucked even more for this retard tier move
Aug 26, 2019 09:08 AM
(This post was last modified: Aug 26, 2019 09:11 AM by Xamarin.)
(Aug 25, 2019 06:18 AM)MavenGradle Wrote: Meanwhile, Valve is lowering their paychecks for certain exploits:
https://hackerone.com/valve/policy_versions?change=3616941
"Valve's security philosophy" says inside HackerOne. Hahahahah you don't have any philosophy or education my dear Volvo. Otherwise you would give bounties to all those guys that fugg your game with "client-side exploits" that destroy the game. But who cares, right ? Throw more skins in there, to excuse the inability and low-level IQ of the employees f your company.
Does anybody know if selling an exploit to Apple results in an NDA where you can't even put the accomplishment on your resume? I have to reasonably assume that the NSA makes very sure that researchers don't mention they sold an 0day to them... but for academic researchers, I can see the value of being able to include a list of exploits found and sold on your CV.
(Aug 9, 2019 11:49 AM)Bear Wrote: Arent Apple known to be stingy with their bug bounties?
YESSSSSS THEY DONT PAY!!!!
Theyre liars! they consider what we do a donation! Fuvkers
Most like a "thank you" and maybe a free Iphone. They aren't going to pay no 1 million dollar bounty.
DO NOT DEAL WITH THIS MEMBER
Wow, that's an insane amount. Just goes to show how serious they are getting about it because of what happened lately lol
The reason apple have upped there bounty program is simple, people are selling exploits to cellebrite and similar company's, now if apple are not paying out and ripping you off claiming they already knew about exploit, it makes me think is the person your reporting it to @apple are claiming the $$ with help of another friend.
There should be no reason why apple wont pay out, because if you have found an exploit, whats saying you wont find a better exploit and after getting burned by apple its not like you would run to them again unless your stupid
|