Conference Black Hat which took place last week, an annual event created for the InfoSec community, Ivan Krstic, the Security Chief of Apple engineer, announced the launch of a new program that in Cupertino pay people who discover bugs and important security company software vulnerabilities . How much? Because nothing less that $200,000.
This is the first time that Apple pay to find these types of bugs, but is not a new program. Other companies responsible of systems operating important, as Google (Android) and Microsoft (Windows), already have released their programs “bug bounty” with that pay large sums of money to any user that find this type of failures in its systems operating.
Find vulnerabilities in the software of Apple has award
The new program bug bounty of Apple is part of the effort of the company open to hackers, security researchers and cryptographers who want to help improve the security of the company.
The award of $200,000 not is it will take any discovery, if not that is the maximum that will pay them of Cupertino by find failures of security in their software. In this way, the fifth of million-dollar discoverers of failures will take you is in firmware components Secure boot, while other smaller vulnerabilities, as the user out of the sandbox data access from a sandbox process, will receive “only” $ 25,000.
The new program will be launched at some point in September, just the month in which iOS 10 will be released officially. We remind you that the next version of iOS, at least in current betas, does not have the encryption kernel. Apple, like other security specialists, says that safety will not be compromised and that thus you will find and correct security bugs sooner. The best example is Ubuntu, a system more safe that iOS and that neither has the kernel encryption. In addition, they have also promised that they will launch more updates, something that undoubtedly won’t jailbreak fans.
