Apple wants to make iPhones safer than ever

In another major push to improve device security Apple has now officially opened up its program to all researchers.
Before today, the iPhone maker's bug bounty program was invitation-based and only select security researchers were able to take part in the program to find vulnerabilities in iOS.
Now Apple has expanded its program by raising its maximum bug bounty reward from $200k to $1.5m and the company will also accept vulnerability reports for iPadOS, macOS, tvOS, watchOS and iCloud in addition to iOS.

Bug bounty rules and rewards

Apple also published a new page on its website which explains the rules of the bug bounty program along with a breakdown of the rewards researchers can earn for submitting reports on exploits they've discovered.
In order to be eligible for a bug bounty reward researchers must be the first party to report the issue to Apple Product security, provide a clear report with a working exploit and not disclose the issue publicly before Apple releases the security advisory for the report.
To earn the biggest reward the program has to offer, they will need to find security bugs that are new, affect multiple platforms, work on the latest hardware and software and impact sensitive components. Finding vulnerabilities in beta releases will earn researchers even more as Apple will add a 50 percent bonus on top of the regular payout for all bugs reported in a beta release.
Additionally, the company will pay a 50 percent bonus for regression bugs which are bugs that were previously patched in older versions of its software that have accidentally been reintroduced in its code at a later point. Vulnerabilities that can result in zero-click or one-click attacks will also earn researchers top prizes but they will need to submit a full exploit chain to claim their reward.

Comments

Post a Comment

Popular posts from this blog

Linktree’s free workaround lets you add multiple links to your Instagram bio

Image
Instagram only gives you one opportunity to link to outside resources inside its photo sharing platform. This might not be a problem for a majority of the users, but for those wanting a little more customization and even more options, it leaves much to be desired. Enter  Linktree , a free tool for Instagram designed to improve traffic to your outside link, be it a blog, portfolio, or store. How it works is fairly straightforward. After connecting Linktree to your Instagram profile, you’ll receive a single link to place in your Instagram bio. Once that link in place, you can customize what it’s linked to within your browser, be it a single website, or a collection of sites you’re looking to direct followers to Say you’re a photographer who’s using Instagram as a marketing tool for your wedding photography. Using Linktree, you can direct Instagram followers to your blog, your portfolio site, and even your other social media accounts. Until now, you would’ve been stuck choosing b
Read more

EVERYTHING WE KNOW ABOUT THE PIXEL 4, THE MOST-LEAKED PHONE EVER

Image
Google’s  Pixel 3 might have been the  most-leaked phone in history . Long before its unveiling, we knew practically everything about it from unboxing videos, photo comparisons, even a full review of the device. Surely, for the Pixel 4, Google would clamp down on leaks to leave some surprises for its debut on  October 15th , right? Let’s just say, if that was the plan, it didn’t exactly work out. We’ve now seen the Pixel 4 XL from every angle and in three different colors. At least seven different sources have touched this phone, many of them confirming the same specs. We not only know which cameras it’ll have, but also what they may be capable of, including air gestures (go figure). That doesn’t even count information Google has already shared  on purpose. So if you want to know almost everything about the Pixel 4 nearly a month before it’s announced, buckle up. We’ve sifted through all of the rumors and information we can find to compile everything we know — and everything we
Read more

Our favorite iOS apps for the iPhone and iPad in 2018

Image
As 2018 comes to a close, it’s time to look at some our favorite apps of the year. While not all of these are brand new, many of them popped up onto our radar for the first time in 2018, and are definitely worth the attention. Others are some of our favorites that are still best-in-class despite having been around for some time now. We aim to do things differently at TNW, and as such you’re not going to find the recommendations you’re probably used to seeing: Gmail, Skype, Dropbox, and the like. Instead, we want to focus on the best-of-the-best that you may not have heard of, and others that are just special enough to warrant a mention. As always, we’d encourage you to share some of your favorites in the comments below, or on Facebook. Enlight Pixaloop (Free Pixaloop  is one of my favorite apps on the market. Unlike typical image editors that allow you to remove red eye or apply a filter, Pixaloop allows you to create stunning photo animations with a few clicks on your
Read more