Published On: Fri, Jul 7th, 2017

Bug Bounty Hunters Prefer Reporting iOS and MacOS Bugs To Others Than Apple

Bug annuity programs are not new in tech town, Google and other companies have been using prerogative programs for a hackers who hunt bugs in their module and news it. Google has been a distinguished actor in a domain of bug annuity programs, and it also mentions a names of annuity hunters who found a vulnerabilities in a confidence bulletin.

In 2016, Apple had also announced a bug annuity module during a Black Hat conference. But a module never unequivocally took off as Apple expected. Also, there has never been any news about hackers finding bugs in a iOS or any other module by Apple. No, it is not since of iPhone’s confidence though a hostility of hackers to news it to a company. A news published by Motherboard states that hackers are doubtful to surprise Apple about a bugs as they would get improved income by stating it to third parties.

ios-and-macosRelated Apple Officially Releases Its 6th iOS 10.3.3 Beta – macOS 10.12.6 Beta 6 Also Released

The reports also contend that some confidence researchers are reluctant to news bugs to Apple as it would bushel their serve investigate into a OS. For a hackers who are doing it for creation money, offered bugs directly to Apple is not profitable. Conforming to a practice, one of a researchers, Nikias Bassen says, “If you’re only doing it for a money, you’re not going to give [bugs] to Apple directly”. Similarly, Patrick Wardle, a researcher specialising in MacOS investigate says that “iOS bugs are too profitable to news to Apple”.

Greater rewards from third parties

Last year, Apple got into a confidence fight with a FBI over iPhone encryption. The Cupertino hulk showed a red label to a confidence group for a charge of violation into a iPhone of an accused. Later, a FBI found outward assistance for unlocking a phone. It paid a large volume to an different hacker for doing a task. This occurrence is one of a indications that hackers are peaceful to handover bug reports to outward parties than Apple due to inducement difference. The eccentric hackers can acquire incomparable rewards by stating bugs to other parties.

According to a report, Apple’s bug annuity module works on an invite-only basis. The confidence researchers who are a partial of a program, have a possibility to acquire rewards starting during $25,000 and trimming adult to $200,000 for sport bugs in iOS and MacOS.

workflow-6Related Apple’s Recently Acquired Workflow App Now Listed in App Store’s ‘Apps Made by Apple’ Section

The volume that Apple is charity to a annuity hunters seems big, though researchers still cite others over Apple when it comes to stating bugs in iOS and MacOS as third parties are always adult for charity incomparable amounts than Apple. Companies like Zerodium squeeze exploits from bug hunters and sell them to their clients. The process of jailbreaking iOS 10 costs $1.5 million. Another company, Exodus Intelligence, shells adult to $500,000 for identical iOS vulnerabilities.

Apple needs to disencumber adult a small to spin a bug annuity module into a successful one. The association needs to relax a acknowledgment manners into a program, this approach it can have a wider assembly of eccentric researchers that would news bugs in a software. At a time of Apple’s bug annuity program’s launch, many researchers asked a association for special iPhones though restrictions to investigate a formidable inlet of a OS, though Apple did not do a demand. The company’s concerned poise has acted as one of a reasons that puts off white-hat hackers from operative with them. Apple needs to renovate a module to get a preferred response from a hackers.

About the Author

Leave a comment

XHTML: You can use these html tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>