top | item 37617300

(no title)

throwaway38475 | 2 years ago

They all do that. I've been in Offensive Security for 10+ years with several spent at FAANGS, and not only do they all have large security teams doing internal testing, they hire multiple contractors like Trail-of-Bits to audit every important service continuously throughout the year.

Apple has way more than 10 full time researchers looking at iOS all day, trust me :). They also have a really generous bug bounty. There is always bugs though.

discuss

order

kramerger|2 years ago

> Apple has way more than 10 full time researchers looking at iOS all day.

Yes

> They also have a really generous bug bounty.

Hell no

tholdem|2 years ago

Agree. Not long ago, Apple used to sue people reporting vulnerabilities to them. Imagine punishing people doing free work for you. Not a good look.

lima|2 years ago

Not only is it not generous (relatively speaking), but actually getting paid can be extremely annoying.

Used to be even worse.