{"id":26190,"date":"2019-08-06T16:21:21","date_gmt":"2019-08-06T20:21:21","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=26190"},"modified":"2021-07-13T11:55:45","modified_gmt":"2021-07-13T15:55:45","slug":"hacker-friendly-iphones-and-mac-bug-bounty-program","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2019\/08\/06\/hacker-friendly-iphones-and-mac-bug-bounty-program\/","title":{"rendered":"Hacker-Friendly iPhones and Mac Bug Bounty Program"},"content":{"rendered":"

Thomas Brewster<\/a> (via Patrick Wardle<\/a>):<\/p>\n

\n

Later this week, at the Black Hat security conference in Las Vegas, Apple is to announce plans to give security researchers special iPhones that will make it easier for them to find weaknesses in the smartphone, Forbes has learned. It’ll also be announcing an Apple Mac bounty, so anyone who can find security issues in macOS will get rewarded, sources claimed.<\/p>\n<\/blockquote>\n\n

Steve Troughton-Smith<\/a>:<\/p>\n

\n

What could a pre-jailbroken iPhone from Apple look like? I would have to imagine it has debug symbols (+ no dyld cache) and the ability to attach a kernel debugger, maybe even SSH, and is surely very securely provisioned and locked to your dev account with strict usage rules<\/p>\n<\/blockquote>\n\n

Joel Bernstein<\/a>:<\/p>\n

\n

Uh, can you provide non-current-OS iPhones to devs?<\/p>\n<\/blockquote>\n\n

Ivan Krstić<\/a>:<\/p>\n

\n

Very excited to return to the Black Hat stage<\/a> this year to talk about some world-class Apple security features! iOS code integrity and Pointer Authentication Codes, Mac secure boot with the T2 Security Chip, the crypto behind the Find My feature, and more.<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n