Apple has introduced significant changes to its bug bounty program, affecting how researchers can report and get paid for discovering vulnerabilities in the company's systems. The tech giant has implemented a cap on the amount of money a researcher can earn within a certain timeframe.
Apple's bug bounty program was launched in 2016, allowing security researchers to earn money by discovering and reporting vulnerabilities in the company's systems. The program has undergone several changes over the years, but the latest update introduces a cap on the amount of money a researcher can earn within a certain timeframe. This move is likely to impact the way researchers approach bug hunting.
According to reports, Apple has introduced a cap of $200,000 per researcher, per year. Additionally, the company has introduced a cool down period, which prevents researchers from earning money from the bug bounty program for a certain period after reaching the cap. This change is likely to affect researchers who rely heavily on the bug bounty program for income.
The changes to Apple's bug bounty program have raised questions about the impact on researchers. Some argue that the cap and cool down period will deter researchers from participating in the program, potentially leading to a decrease in the number of vulnerabilities reported. Others believe that the changes will encourage researchers to focus on discovering more critical vulnerabilities, rather than trying to maximize their earnings.
The changes to Apple's bug bounty program are likely to have significant consequences for the security research community. As the program continues to evolve, it will be important to monitor the impact on researchers and the number of vulnerabilities reported.