Tuesday 22 September 2015

iPhone hackers offered $4.7m reward

Zerodium, a company that pays hackers for software and device vulnerabilities and on-sells them to customers including government security agencies, says it has a total of US$3 million (NZ$4.7m) on offer for any three hackers that can provide a full “jailbreak” of Apple’s brand new iOS 9 and iPhone 6s.

A jailbreak is a type of attack that allows a person (including hackers) to take total control over a device, for example letting them install apps and services not sanctioned by Apple.

This won’t be an easy payday for any aspiring millionaire hackers though. A list of conditions on the Zerodium website states the exploits must be comprised of only zero-days (previously unknown vulnerabilities) and has to be as simple for the end user as visiting a web page on Safari or Google Chrome or reading a text message.

Furthermore, the attack must be persistent (its effects must remain even after a restart) and it must work on the most recent generations of Apple devices (including iPhone 6s), running the latest iOS 9.

READ MORE:
* How to update Apple’s iOS9
* What you get from iOS9
* Seven ways iOS9 will change your iPhone

Zerodium says the unprecedented reward ($1m for each hacker) on offer is due to the hugely increased security in Apple’s latest software and hardware, with chief executive officer Chaouki Bekarr telling Forbes that “iOS is the most secure mobile OS as of today”.

The zero-day exploit market is big business. Many companies operate their own reward programmes to compel researchers to turn in bugs and vulnerabilities so issues can be fixed, although some prefer to disclose flaws publicly so users can be warned.

The biggest money is often offered by exploit merchants who keep the techniques and code to themselves and deploy them for paying customers.

Zerodium is a new program from French company Vupen, designed to focus specifically on zero-days for the most prominent operating systems and devices.

Apple has yet to respond publicly but has been known to hire those who hack their software.In 2011, for instance, Apple hired Nicholas Allegra, aka ” comex “, the notorious hacker behind JailbreakMe which makes removing the restrictions on the company’s iPhone, iPod Touch and iPad devices as simple as clicking a link.

View the original content and more from this author here: http://ift.tt/1YyeCVy



from hacker samurai http://ift.tt/1YyeCoy
via IFTTT

No comments:

Post a Comment