Chapter 67 iOS Vulnerability Bounty Plan

Although he didn't sleep all night, Lin Hui was not tired at all.

Not only did I feel tired, but I felt full of energy.

Is it because of the stimulation of money?

Or is it because his body has been strengthened to a certain extent after rebirth?

But Lin Hui felt that it was most likely the latter.

After all, I have received money in recent times.

Lin Hui is already numb to money.

But then again, if the time and space tunnel really strengthened his body.

Will it also strengthen the phone that traveled with him?

Well, despite such speculation.

Lin Hui can't try to fall.

It would be embarrassing if you "did you die".

After all, Lin Hui had to rely on the mobile phone from his previous life for a considerable period of time to seek benefits.

Lin Hui gave up his random thoughts.

But after all, he was not very sleepy, and Lin Hui didn't go to bed either.

Instead, continue to wander around some overseas portals.

Soon, Lin Hui's attention was attracted by such a message:

——Apple has officially opened the iOS bug bounty program.

Lin Hui remembers that she did not officially open the iOS bug bounty program to the public in her previous life until 2019.

This time and space are actually open in advance.

Before executing the iOS vulnerability bounty program.

Apple only opens invitation-based flaw reward programs to selected security researchers.

And after accepting the iOS security defect report, the bonus amount is relatively low.

Now, Apple has fully opened its vulnerability bounty program.

This undoubtedly means starting today.

Any security researcher who finds a bug in iOS, OS X or iCloud can earn Apple's high cash rewards by revealing a vulnerability to Apple.

(ps:…In 2016, OS X was renamed macOS)

Follow this news.

Apple said it would increase the upper limit of bounty from $200,000 per vulnerability to up to $1 million based on the nature of the security vulnerability (judgment criteria are based on the complexity and severity of the development chain).

If a persistent zero-click kernel code execution vulnerability is found, it will receive the largest bonus, i.e. $1 million.

In addition, Apple also stated that if vulnerabilities can be found in the Beta (beta) software.

The bounty can earn up to $1.5 million at one time.

This is like a heifer flying.

The vulnerabilities from iOS7 to iOS15 can be said to be endless.

Lin Hui seemed to have discovered a long-term meal ticket for a moment.

Isn’t this money much faster than developing software?

Although Lin Hui is not a security expert.

But what I like to report about in my previous life is all kinds of messy information software (technology partition) is related to iOS security vulnerabilities.

Lin Hui remembers that a few days before his rebirth, he saw an article titled "The 50 Most Serious Vulnerabilities in iOS History" on "36Kr".

Lin Hui has read the article that he wrote pretty well

Generally, there is the habit of caching or screenshotting.

I have to say, this is a really good habit!

(o゜▽゜)o☆[BINGO!]

Looking through the phone in my previous life.

The harvest is much richer than expected by forest ash.

Not only did he find the article "50 Most Serious Vulnerabilities in iOS History" that he saw not long ago in the "36Kr" software.

An article like "Google announces 16 major iOS vulnerabilities: attacks can be launched through iMessage" was also discovered.

besides.

Lin Hui also found an article in Jian/book titled "The classic bugs you don't know from ancient times to the present!".

Later, he saw a lot of similar news in today's headlines.

For example, "IOS exposed major security vulnerabilities to unlimited iPhone restart"

"Inventory of strange vulnerabilities in iOS in the past dynasties, how many of you have been shot?"

News like "Why iOS11 is called bugOS".

...

Of course, there are many reports of vulnerabilities related to Windows and Android.

But Lin Hui doesn't care about these for the time being.

After searching for a while,

Lin Hui still found a video cached by Bet/Li/Bi/Li:

Videos like "iOS 8 Official Version Vulnerability Collection".

Isn’t iOS 8 the new generation of iOS that Apple is preparing to release at WWDC this year?

Although the official version of iOS 8 has not been released yet.

But now iOS 8 beta version already exists.

There is no reason why bugs that exist in the official version do not exist in the beta version.

(ps:...except for operating systems of some strange mobile phone manufacturers, the beta version is stable than the development version)

And if the WWDC is about to be held for more than ten days this year, it will be held soon.

That is to say, in more than ten days, the current iOS 8 Beta version is likely to be converted into the official version.

In other words, if Lin Hui wants to submit a loophole, he has to hurry up.

After all, reporting a bug in the Beta version can get 50% more money than reporting a bug in the official version.

(Short-term goal, obtain $100 million in a reasonable and legal way)
Chapter completed!