<story><title>We Hacked Apple for 3 Months</title><url>https://samcurry.net/hacking-apple/</url></story><parent_chain><item><author>iJohnDoe</author><text>Apple only paid them $52k? Apple is a trillion dollar company. These hackers saved them easily millions of dollars in expenses.&lt;p&gt;China or North Korea could easily allocate a much larger team to something like this and disrupt Apple (not for bug bounties). Although, China and North Korea dedicate their resources to financial fraud where there is real money to be had.&lt;p&gt;Apple is a tightwad joke. If they laid out a scope of work for a professional pen testing company that included pen testing their 17.0.0.0&amp;#x2F;8 range then that contract would easily have been in the hundreds of thousands.&lt;p&gt;I’m sure foreign adversaries will take notice now. Apple’s cybersecurity posture has always been very weak. It’s known they don’t dedicated any resources to it.</text></item></parent_chain><comment><author>JoblessWonder</author><text>Late reply:  They just paid for 28 more issues, running total is now $288,500.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;samwcyo&amp;#x2F;status&amp;#x2F;1314310787243167744&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;samwcyo&amp;#x2F;status&amp;#x2F;1314310787243167744&lt;/a&gt;</text></comment>
<story><title>We Hacked Apple for 3 Months</title><url>https://samcurry.net/hacking-apple/</url></story><parent_chain><item><author>iJohnDoe</author><text>Apple only paid them $52k? Apple is a trillion dollar company. These hackers saved them easily millions of dollars in expenses.&lt;p&gt;China or North Korea could easily allocate a much larger team to something like this and disrupt Apple (not for bug bounties). Although, China and North Korea dedicate their resources to financial fraud where there is real money to be had.&lt;p&gt;Apple is a tightwad joke. If they laid out a scope of work for a professional pen testing company that included pen testing their 17.0.0.0&amp;#x2F;8 range then that contract would easily have been in the hundreds of thousands.&lt;p&gt;I’m sure foreign adversaries will take notice now. Apple’s cybersecurity posture has always been very weak. It’s known they don’t dedicated any resources to it.</text></item></parent_chain><comment><author>JoblessWonder</author><text>But that is the thing... their official Bug Bounty program scope didn&amp;#x27;t include most of these exploits so any payments&amp;#x2F;awards would have to be made outside of the traditional system and thus probably take more senior approval&amp;#x2F;time to make payments.  They knew that they would possibly not get paid for them but took the risk anyways.  I have a feeling they will end up getting at least a hundred thousand dollars total.</text></comment>