So any future zero-days discovered will now sell on the dark web, you did this to yourself, Apple.

Seems like a much more lucrative idea to sell it to the highest bidder then

People defend apple wwayyyy too much. They're worse than Google, which is saying something. Google doesn't pretend that your data security is their only concern and then barely do things differently to actually protect you

Apple should be ashamed of this nonsense.

To them [edit: Apple], Apple's customers' security is worth $1000 total.

Amazing :3

It’s not ethical but if this is the case I would absolutely sell it to a bad actor. I know it’s terrible to do this but I also have bills to pay and apple is worth like 3 trillion dollars. Ridiculous

Cause fck you that's why.

I'm explaining - their whole reputation as some steel monster doing things well is not due to some competencies or proper organization, it's due to it being illegal to show and check their failure.

In a proper (like 90s) environment their bugs would be known to every script kiddy out there, and everybody would discuss them and laugh at Apple. Various alternative solutions and modifications to their products would too be widely available.

They have correctly determined that appearance is more important for their power than actual security, - because customers don't form customer associations and other institutionalized ways of double-checking companies' bullshit, and without that even if you don't buy all that Apple says, you still take their discourse as given.

And maintaining their appearances is what law does, you'll get in jail for informing too many people of what they do.

But, as always, the actual criminals usually are informed.

It's the same with Google, MS and such.

In the computing world historically customer associations and such were not a thing (I mean, there existed such websites, but they were somewhat tied in feel and function to web directories and indie web news, so they mostly died out), and reputation in the wild was, because social media platforms were not a thing, and big media, while horizontal talk and gossip were.

Which is why making it illegal to spread factual information of their vulnerabilities and means to confirm it has effectively killed such feedback - reputation doesn't spread without confirmation.

So - customers unionize, because tech workers still think they're gonna be bosses in the new ancap world, and thus don't. I'm ancap since the time when that was more hated than neo-Nazis, and I've chosen that ideology consciously when I actually could think rationally about political and social ideologies, and they are not building anything of the kind.

For the post subject itself - they don't care if it ends up on the dark web. They don't lose anything significant.

Does one have to join some apple developers system and pay some annual developer's fee in order to get the 1000 bounty ?