Inkqubo entsha ye-Apple ibonelela ngama-200.000 eedola kuye nakubani na ofumanisa ukuba sesichengeni kwesoftware

Kwinkomfa ye-Black Hat eyenzekileyo kwiveki ephelileyo, umsitho wonyaka owenzelwe uluntu lwe-InfoSec, u-Ivan Krstic, injineli eyintloko kwezokhuseleko e-Apple, ubhengeze ukumiliselwa inkqubo entsha ngazo ezo zeCupertino hlawula abantu abafumanisa iibhugi kunye Ukuba semngciphekweni Iimpawu ezibalulekileyo zokhuseleko kwisoftware yenkampani. Yimalini? Ewe akukho nto ingaphantsi kwe- $ 200.000.

Eli lixesha lokuqala ukuba iApple ihlawule ukufumana ezi ntlobo zeebugs, kodwa ayisiyinkqubo intsha. Ezinye iinkampani ezinoxanduva lweenkqubo ezinkulu zokusebenza, ezinje ngeGoogle (i-Android) kunye neMicrosoft (Windows), sele ikhuphe eyazo Iinkqubo ze-bug bounty bahlawula ngayo imali eninzi kuye nawuphina umsebenzisi ofumana olu hlobo lwesiphene kwiinkqubo zabo zokusebenza.

Ukufumana ukuba semngciphekweni kwisoftware ka-Apple kunomvuzo

Inkqubo entsha buhlungu I-Apple yinxalenye ye Inzame yenkampani yokuvulela abagculi, abaphandi bezokhuseleko, kunye nababhali beekhompyuter abafuna ukunceda ukuphucula ukhuseleko lwenkampani.

Ibhaso 200.000 $ ayizukuthatha nje nakuphi na ukufumanisa okuza kuyithatha, kodwa yeyona nto iphambili eya kuthi ihlawulwe yiCupertinos yokufumana iimpazamo kwezokhuseleko kwisoftware yazo. Ngale ndlela, isihlanu sezigidi zeedola ziya kubafumana iziphene kwi izixhobo ze-firmware I-boot ekhuselekileyoNgelixa obunye ubungozi obuncinci, njengebhokisi yesanti yokufikelela kwidatha yomsebenzisi ngaphandle kwebhokisi yesanti, iya kufumana "kuphela" i $ 25.000.

Inkqubo entsha izakwazisa nge Ngexesha elithile ngo-Septemba, kanye ngenyanga apho i-iOS 10 iya kukhutshwa ngokusemthethweni. Siyakhumbula ukuba ingxelo elandelayo ye-iOS, ubuncinci kwii-betas zangoku, ayinayo i-kernel ebhaliweyo. UApple, njengabanye oochwephesha bezokhuseleko, uthi ukhuseleko aluyi kubeka esichengeni kwaye iimpazamo kwezokhuseleko ziya kufunyanwa zilungiswe kwangoko. Owona mzekelo ubalaseleyo Ubuntu, inkqubo ekhuseleke ngakumbi kune-iOS kwaye ayinayo i-kernel ebhaliweyo. Ukongeza, bathembisile ukuba bazakukhupha ezinye uhlaziyo, into abalandeli be-jailbreak ngokungathandabuzekiyo abangayithandiyo.