Stories
Slash Boxes
Comments

SoylentNews is people

posted by n1 on Thursday August 11 2016, @08:56PM   Printer-friendly
from the cash-prizes-to-be-won dept.

Last week Apple made its belated entrance into the bug bounty market, announcing a top award of $200,000 for major flaws in iOS, but Cook & Co have been comprehensively outbid.

On Tuesday, exploit trading firm Exodus Intelligence said it is willing to pay $500,000 for a major flaw in iOS 9.3 and above – and the exploit to use it. Researchers can either take a lump sum or accept a smaller sum and quarterly payments until the exploit is found, which the company's founder told The Reg could add up to even more.

"The majority of our clients are defensive vendors, penetration testers, and red/blue teams," said Logan Brown, president of Exodus.

Apple exploits get the highest reward, reflective of their scarcity. Microsoft and Google's bug bounty programs will also need to up their rewards to match Exodus's prices.

[...] Security experts are worried that the hoarding of serious flaws will have a deleterious effect on overall security for everyone. Exodus attempted to reassure people on this front by beginning a vulnerability disclosure process back in February, but it only discloses after it has extracted the "maximum value for our customers."


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2, Informative) by Ethanol-fueled on Thursday August 11 2016, @10:42PM

    by Ethanol-fueled (2792) on Thursday August 11 2016, @10:42PM (#386804) Homepage

    I heard from one of your guys that your employer is developing some rather interesting Cyberstalking Society Oppression Tools™.

    Unfortunately, until the Government lightens up on pot-smoking and occasional hard-drug usage with regard to security clearances, your potential talent pool is going to be rather limited.

    Starting Score:    1  point
    Moderation   +1  
       Informative=1, Total=1
    Extra 'Informative' Modifier   0  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Thursday August 11 2016, @11:25PM

    by Anonymous Coward on Thursday August 11 2016, @11:25PM (#386813)

    Somebody else does development of the Cyberstalking Society Oppression Tools™. That kind of project is usually written in disturbing languages like Java, C#, Python, and other interpreted crap. It's sold to cops. It probably runs on Windows Vista. It's more soul-sucking than doing COBOL for American Express.

    We do low-level stuff. It's way more fun.

    • (Score: 1) by Ethanol-fueled on Thursday August 11 2016, @11:43PM

      by Ethanol-fueled (2792) on Thursday August 11 2016, @11:43PM (#386820) Homepage

      If you consider transplanting individual blades of grass, sawing concrete with butter-knives, and matching and folding a mixed pile of 100 different pairs of socks "fun," then you should probably include a lot of masochism questions in your employment questionnaire.

      In fact, the first thing you should do is hire Angela Merkel -- she's eaten more than her fair share of shit and hates everything about people.

      • (Score: 0) by Anonymous Coward on Friday August 12 2016, @05:20AM

        by Anonymous Coward on Friday August 12 2016, @05:20AM (#386905)

        she's eaten more than her fair share of shit and hates everything about people.

        In contrast with another prominent member of the female politician species, who spews shit incessantly and still hates everything about people.