Apple now offers jailbroken iPhones in the security research equipment program

One year after announcing the "Security Research Equipment Program", Apple began accepting special iPhone applications for security researchers to use to resolve vulnerabilities and vulnerabilities.

Apple pointed out that the iPhone devices provided for the "Apple Security Research Equipment Program" can only be used in a controlled environment for security research. The company pointed out that Shel access is available on the iPhone provided, and researchers will be able to run any tool and choose the right. Otherwise, the SRD line

To be as close as possible to the standard iPhone in order to become a "representative research target"

These devices are provided on a renewable basis for 12 months and remain the property of Apple. They are not suitable for personal use or daily carry, and must remain in the residence of the program participant at all times.

In addition, access and use of special iPhones must be restricted to persons authorized by Apple.

These devices are only available to Apple Developer Program subscribers who have successful experience in discovering security issues on Apple platforms or "other modern operating systems and platforms". Apple specifically prohibits the use of embargoed countries in the United States or countries where Apple is employed or past years of work.

The application of the device is accepted on the program web page.

Apple initially announced the plan at the 2019 Black Hat Conference. At the time, Apple stated that it would set the iPhone as part of the program to have permissions to provide more access to the internal operation of iOS. This move may help increase the number of issues and make it in beta or public.

Can be seen before release. Release the software.

Apple first launched a bug bounty program in 2016, which aims to reward researchers for discovering bugs and flaws in iOS that may undermine the security of iPhone and iPad. Throughout Apple's life cycle, there have been complaints that Apple failed to develop similar programs that can run on other operating systems.

In the same black hat meeting that announced Apple's security research equipment plan, Apple also increased the bounty paid for vulnerabilities.

This vulnerability provides a zero-click access to high-value user data through the network without user interaction. The maximum payment for this vulnerability is $500,000. At the top of the list is the continuous full-chain kernel code execution attack that can be executed without user intervention, which may bring up to 1 million US dollars in revenue.

In addition, if researchers find a vulnerability in the pre-release Beta version, and the vulnerability has been reported to Apple before Apple’s public release, they will receive a bonus of up to 50%.

With the pre-issuance bonus, the maximum possible income is 1.5 million yuan. The bug bounty is a considerable fee to Apple. Previously, the maximum possible payment amount was $200,000.

>>>>>>>>>>>>>>>>>>>>>>Mobile phone battery