Apple's bug bounty policy

[JacksinPA]

https://www.bbc.com/news/technology-47169462

Apple's bug bounty policy has led one security researcher to withhold details on a password-stealing vulnerability in the MacOS operating system.

German bug hunter Linus Henze said he would not release details of the problem to Apple until it included MacOS in its bounty program. Currently Apple only pays for bugs found in the iOS operating system for phones. In addition, security experts have to be invited to take part in the programme that pays up to $200,000 (£154,300) for the most serious bugs.
===========================================
He wants Apple to establish a bug bounty program over all of its platforms, not just phones. It's a great & cheap way to tap into a vast pool of technical experience & expertise in finding & diagnosing bugs in their operating systems.

 

[PeteEU]

Apple to pay teenager who found FaceTime bug - BBC News

Apple's bug bounty policy has led one security researcher to withhold details on a password-stealing vulnerability in the MacOS operating system.

German bug hunter Linus Henze said he would not release details of the problem to Apple until it included MacOS in its bounty program. Currently Apple only pays for bugs found in the iOS operating system for phones. In addition, security experts have to be invited to take part in the programme that pays up to $200,000 (£154,300) for the most serious bugs.
===========================================
He wants Apple to establish a bug bounty program over all of its platforms, not just phones. It's a great & cheap way to tap into a vast pool of technical experience & expertise in finding & diagnosing bugs in their operating systems.

They won't. They have a long history of hiding and ignoring flaws in MacOS. They have based their whole business on a myth of being "flawless".

Sent from my Honor 8X using Tapatalk