Infosec researchers say Apple’s bug-bounty program needs work
This September 2021 Ars Technica article reports that infosec researchers say Apple's bug-bounty program pays less and more slowly than competitors. Bugcrowd founder Casey Ellis says companies should pay researchers when reported bugs lead to code changes closing a vulnerability, even if the bug fails the company's strict reading of its guidelines.
Source description, as published
Apple allegedly pays less for bugs than its competitors do—and pays more slowly.