News for hackers. Stuff that matters.

A comment on SiriSpy – iOS bug allowed apps to eavesdrop on your conversations with Siri. Parent comment

Re:SiriSpy – iOS bug allowed apps to eavesdrop on your conve... by eastbound on Wednesday October 26, 2022 @04:08PM (#33348690)
The right amount for a security bounty is the sum of all assets covered by that vulnerability minus $1.

This is the only way companies will take the right processes to protect those assets.

[ Parent | on HN ]
Re:SiriSpy – iOS bug allowed apps to eavesdrop on your conve... by kube-system on Wednesday October 26, 2022 @05:31PM (#33349786)
The impact and difficulty of exploit are pivotal parts of assessing the risk of a vulnerability. It doesn’t really matter how many dollars of things are involved if the exploit can’t be exploited or if it’s not a big deal if anyone does.
[ Parent | on HN ]