Slashdot Mirror
Hack iOS 10, Get $1.5 Million
Reader Trailrunner7 writes: The stakes in the vulnerability acquisition and bug bounty game have just gone up several notches, with a well-known security startup now offering $1.5 million for a remote jailbreak in iOS 10.The payout was put on the table Thursday by Zerodium, a company that buys vulnerabilities and exploits for high-value target platforms and applications. The company has a set of standing prices for the information it will buy, which includes bugs and exploits for iOS, Android, Flash, Windows, and the major browsers, and the top tier of that list has been $500,000 for an iOS jailbreak. But that all changed on Thursday when Zerodium announced that the company has tripled the standing price for iOS to $1.5 million.
The question is: which ones?
CIA? NSA? FBI?
KGB?
If you sell to them, you're a weapon dealer of the shadier kind. You'll help oppressive regimes to jail dissidents.
Its pretty obvious that some of their customers are governments. Who else would be interested in tor browser exploits:
https://www.zerodium.com/image...
Short answer: ALL of them. Governments are become the Great Enemy.
Given the FBI complaining about its encryption, this bug bounty, etc, the general impression (and yes, it might be wrong) is that the iOS platform is pretty secure.
So how secure is Apple in terms of physical security, employee security, etc?
You would think the next level of attack would be the HQ itself -- getting somebody inside, either secret agent style or compromising an Apple employee somehow.
Are people who work on iOS device security watched 24/7 by security themselves? Do they work in some kind of high security vault? Is the guy pushing the mail cart actually a deep cover FSB agent?
If you work for Apple on iOS security do you think twice when some pretty girl at the bar starts talking to you, especially if she says her name is Natasha?
Yes but I don't risk going to jail selling the exploit. So if I could find this, I'd happily take the $1.5 million selling it legally rather than risk going to jail in order to try to get more. Hopefully by selling it, it would actually get fixed. I'd prefer to sell it a bug bounty program administered by the vendor, though, so I don't have to worry about the moral consequences of the sale.
If you actually had a chance, you wouldn't be talking about it here.
Then you look at the bottom of the list, and see how little they'll pay for exploits of pretty much ANY web-content management system (Drupal, Joomla, Wordpress)... and, if you're unfortunate enough to be responsible for any of these, you go weep softly in a corner somewhere.
#DeleteChrome
Why wouldn't they? At a minimum, modern governments have an obligation to protect their constituents from espionage, and in some cases that means using software exploitation to gain the upper hand.
If the goal is to protect constituents from espionage, I argue that they'd be more effective in this task if they took exploits to the various vendors and convinced/helped them close the holes.