Apple pays hacker $75,000 for uncovering camera exploits in Safari


San Francisco, Apr 4 (IANS): Apple has paid $75,000 to a hacker for figuring out a number of zero-day vulnerabilities in its software programme, a few of which could possibly be used to hijack the digital camera on a MacBook or an iPhone.

Former Amazon Web Services security engineer Ryan Pickren reportedly discovered seven zero-day vulnerabilities in Safari after he decided to "hammer the browser with obscure corner cases" until it started showing weird behavior, Forbes reported on Friday.

Pickren reported his research fully via the Apple Bug Bounty Programme in mid-December 2019.

"My research uncovered seven bugs," Pickren said.

Apple fixed three of the security flaws the ones that allowed for camera hijacking in the January 28 Safari 13.0.5 update. The four remaining flaws were not fixed until the Safari 13.1 release on March 24.

"I really enjoyed working with the Apple product security team when reporting these issues, the new bounty programme is absolutely going to help secure products and protect customers. I'm really excited that Apple embraced the help of the security research community," the report quoted Pickren as saying.

  

Top Stories


Leave a Comment

Title: Apple pays hacker $75,000 for uncovering camera exploits in Safari



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.