I must be werkin too much since I can’t has any memeography. Drawing a blank for now frens. No moar memes 💔
Need advice cyber frens
I find bugs all the time on iOS and submit them to apple through their bug bounty program. I never received any money but only just a shout out once by them crediting my name on their site. The bug I recently found was a sandbox escape and you could actually see code spilling out. There is absolutely no doubt that I found an exploit and I kept it secret from anyone except submitting the details to Apple via their bug report program. They asked for proof on another version of IOS which I provided. Then after I submitted that they simply wrote the bug off as not being a security vulnerability despite it obviously being one.
What is my recourse? Do I dispute their conclusion of my bug report with them? Or should I go grey hat and submit to zero dium. Is zero dium okay to do biz with?
I really don’t want to go that route and I’ve always considered myself a white hat and want to help apple make better products but I don’t werk for free. I don’t fucking beg for pay either. That’s all kinds of dysfunctional and is a sour business relationship. I don’t know if I’m being ripped off because I’m a republican and the people who run the program likely reside in liberaltopia.
I could only do that if zero dium is maga frenly
If they are reselling that info to places besides murica then that’s not cool with me.
Do you have any sauce on them?
Im talking about these guys:
zerodium.com/about.html
They buy exploits. iOS exploits are very valuable. It’s absurd how apple cheats security researchers out of the fractional pay they would receive if they went elsewhere. No good deed goes unpunished.