News for hackers. Stuff that matters.

A comment on Google reveals fistful of flaws in Apple's iMessage app. Parent comment

Re:Google reveals fistful of flaws in Apple's iMessage app by rootusrootus on Tuesday July 30, 2019 @12:01PM (#20566169)
Apple has a bug bounty program, yes? Are they paying Google for these?
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by devrand on Tuesday July 30, 2019 @12:20PM (#20566357)
Project Zero does not accept bounties. They generally ask for the money to be donated.
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by rootusrootus on Tuesday July 30, 2019 @12:41PM (#20566574)
Makes sense. The bug bounty is meaningful money to an individual but it's just a pittance to Google.
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by saagarjha on Tuesday July 30, 2019 @02:16PM (#20567599)
I'd assume it also helps avoid the perception of a conflict of interest.
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by saagarjha on Tuesday July 30, 2019 @02:18PM (#20567617)
Apple's program has a few very specific classes of bugs that they pay out bounties for: these bugs probably don't qualify.
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by bobviolier on Tuesday July 30, 2019 @12:10PM (#20566251)
Probably not. I think that most of those bounties can only be redeemed when you sign an NDA.
[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by jefftk on Tuesday July 30, 2019 @01:02PM (#20566800)
Who requires an NDA? I don't believe Google does: https://www.google.com/about/appsecurity/reward-program/

(Disclosure: I work for Google)

[ Parent | on HN ]
Re:Google reveals fistful of flaws in Apple's iMessage app by bobviolier on Saturday August 03, 2019 @06:57AM (#20599769)
I meant the NDA from the party where the bug is reported, Apple in this case.
[ Parent | on HN ]