https://b.hatena.ne.jp/entry/s/samcurry.net/hacking-apple Between the period of July 6th to October 6th myself, Brett Buerhaus, Ben Sadeghipour, Samuel Erb, and Tanner Barnes worked together and hacked on the Apple bug bounty program. Sam Curry (@samwcyo)... https://b.hatena.ne.jp/tarao/20201012#bookmark-4692517362939896546 2020-10-12T07:15:00Z security https://b.hatena.ne.jp/sora_h/20201011#bookmark-4692517362939896546 2020-10-11T04:55:43Z https://b.hatena.ne.jp/laiso/20201011#bookmark-4692631459892717442 2020-10-11T01:17:13Z https://b.hatena.ne.jp/efcl/20201010#bookmark-4692517362939896546 Appleで見つけた脆弱性色々。 XSS、iBookのCommand Injection、Job経由のSSRF、エラーメッセージにトークンが漏れていた話、PhantomJSを使ったスクショSSRFでのトークン取得、ヒープダンプから認証トークンの取得、XXEでのSSRF、Blind XSS 2020-10-10T13:41:39Z apple security https://b.hatena.ne.jp/htsnul/20201010#bookmark-4692517362939896546 2020-10-10T13:27:49Z https://b.hatena.ne.jp/Watson/20201010#bookmark-4692517362939896546 2020-10-10T05:33:05Z security https://b.hatena.ne.jp/Hiro_Matsuno/20201009#bookmark-4692517362939896546 2020-10-09T09:22:43Z https://b.hatena.ne.jp/yuiseki/20201009#bookmark-4692517362939896546 2020-10-09T09:15:55Z あとで読む https://b.hatena.ne.jp/polme/20201009#bookmark-4692517362939896546 2020-10-09T08:18:29Z あとで読む https://b.hatena.ne.jp/sudo_vi/20201009#bookmark-4692517362939896546 2020-10-09T08:09:54Z https://b.hatena.ne.jp/nagayama/20201009#bookmark-4692517362939896546 2020-10-09T07:40:07Z https://b.hatena.ne.jp/rin51/20201009#bookmark-4692517362939896546 > October 8th, we have received 32 payments totaling $288,500 for various vulnerabilities 2020-10-09T06:55:33Z セキュリティ バグ アップル Apple https://b.hatena.ne.jp/p-baleine/20201009#bookmark-4692517362939896546 2020-10-08T18:31:28Z https://b.hatena.ne.jp/mrtc0/20201009#bookmark-4692517362939896546 2020-10-08T15:00:22Z