News for hackers. Stuff that matters.

A comment on Apple silently fixes iOS zero-day, asks bug reporter to keep quiet. Parent comment

Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by JumpCrisscross on Wednesday October 13, 2021 @10:44PM (#28859984)
> would assume that trying to get a bounty means accepting that you're not selling the vulnerability elsewhere

Having an e-mail from the company confirming the bug is serious and systemic massively raises its market value. Security is necessarily trust less. These game dynamics are unavoidable.

[ Parent | on HN ]
Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by tptacek on Thursday October 14, 2021 @01:13AM (#28860733)
Having an email from the company confirming that they know about the bug probably erases its market value.
[ Parent | on HN ]
Re:Apple silently fixes iOS zero-day, asks bug reporter to k... by cutemonster on Thursday October 14, 2021 @07:00AM (#28862709)
Unless it's harder to fix, and easy to short term exploit?
[ Parent | on HN ]