Apple Offers Big Cash Rewards for Help Finding Security Bugs In March, Facebook paid $10,000 to a 10-year-old boy in Finland who found a way to delete user comments from Instagram accounts.

By Reuters

entrepreneur daily

This story originally appeared on Reuters

TungCheung | Shutterstock.com

Apple Inc. said it plans to offer rewards of up to $200,000 (£152,433) to researchers who find critical security bugs in its products, joining dozens of firms that already offer payments for help uncovering flaws in their products.

The maker of iPhones and iPads provided Reuters with details of the plan, which includes some of the biggest bounties offered to date, ahead of unveiling it on Thursday afternoon at the Black Hat cyber security conference in Las Vegas.

The program will initially be limited to about two dozen researchers who Apple will invite to help identify hard-to-uncover security bugs in five specific categories.

Those researchers have been chosen from the group of experts who have previously helped Apple identify bugs, but have not been compensated for that work, the company said.

The most lucrative category, which offers rewards of up to $200,000, is for bugs in Apple's "secure boot" firmware for preventing unauthorized programs from launching when an iOS device is powered up.

Apple said it decided to limit the scope of the program at the advice of other companies that have previously launched bounty programs.

Those companies said that if they were to do it again, they would start by inviting a small list of researchers to join, then gradually open it up over time, according to Apple.

Security analyst Rich Mogull said that limiting participation would save Apple from dealing with a deluge of "low-value" bug reports.

"Fully open programs can definitely take a lot of resources to manage," he said.

Apple declined to say which firms provided advice.

Such rewards are currently offered by dozens of firms, including AT&T Inc., Facebook Inc., Google, Microsoft Corp., Tesla Motors Inc. and Yahoo Inc.

Microsoft, which has handed out $1.5 million in rewards to security researchers since it launched its program three years ago, also offers rewards for identifying very specific types of bugs. Its two biggest payouts have been for $100,000 each.

Not all bounty programs are as focused as the ones from Apple and Microsoft.

Facebook, for example, has an open program that offers rewards for a wide-range of vulnerabilities. It has paid out more than $4 million over the past five years, with last year's average payment at $1,780.

In March, Facebook paid $10,000 to a 10-year-old boy in Finland who found a way to delete user comments from Instagram accounts.

(Reporting by Jim Finkle; Editing by Andrew Hay)

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Editor's Pick

Side Hustle

I Started a Semi-Passive Side Hustle That Earns $33,000 a Week on Amazon: 'Selling There Is a No-Brainer'

Dr. Jenny Woo wanted to create a product that would help people connect, and it turned out to be a lucrative one.

Marketing

How Augmented Reality Is Transforming the Marketing Landscape — and How Your Business Can Leverage It Effectively

How can physical goods be endowed with digital content? What is phygital marketing, and why will everyone be involved in it in the next five years? Here's what you need to know.

Business News

X Is Losing Users and Struggling to Attract Creators, According to New Data

The company, which is owned by Elon Musk, says that 1.7 million people join the platform every day.

Science & Technology

Why You Should Incorporate AI into Your Business — and How to Do It the Right Way

The proliferation of generative AI tools has made the technology ever more accessible and relevant. Here's how you can apply it to your business as well.

Money & Finance

You Might Spend Unnecessary Money If You Don't Stay on Top of Your Expenses. Here's How to Manage Them.

Nothing makes paying taxes even more onerous — or gets in the way of a firm understanding of how a business is performing — than ineffective expense management. Use these five expense management tips to not merely survive as a business, but thrive.