News for hackers. Stuff that matters.

A comment on How to unc0ver a 0-day in 4 hours or less. Parent comment

Re:How to unc0ver a 0-day in 4 hours or less by umvi on Thursday July 09, 2020 @02:51PM (#23783666)
All this has taught me is that if I find an exploit to unlock <insert DRM'd device> I need to obfuscate the heck out of it to make it as onerous as possible for low-effort bug bounty do-gooders to scoop up a reward from it.
[ Parent | on HN ]
Re:How to unc0ver a 0-day in 4 hours or less by snazz on Thursday July 09, 2020 @03:06PM (#23783830)
Project Zero researchers don’t take bounties, to my knowledge.
[ Parent | on HN ]
Re:How to unc0ver a 0-day in 4 hours or less by saagarjha on Thursday July 09, 2020 @03:11PM (#23783883)
Nor have they been ever offered one, to my knowledge: https://twitter.com/i41nbeer/status/1027339893335154688. I'm actually not sure Apple has ever paid a bounty for anything that wasn't a web issue…
[ Parent | on HN ]
Re:How to unc0ver a 0-day in 4 hours or less by jlgaddis on Friday July 10, 2020 @02:49AM (#23788876)
If memory serves, they've been offered but the bounties are always been given to charity.

I'm guessing that's a policy/requirement of Project Zero as, presumably, the P0 folks are making "enough" already.

[ Parent | on HN ]
Re:How to unc0ver a 0-day in 4 hours or less by saagarjha on Thursday July 09, 2020 @02:58PM (#23783737)
I don't think anyone is getting a bug bounty, especially from this one.
[ Parent | on HN ]