On: Apple says kernel vulnerability is not eligible fo...

[citizen_friend]

So are we going to take this twitter post at face value? Anyone have more info?

[lapcat → citizen_friend]

Yes, it's literally the first item in the iOS 17.5 security release notes: https://support.apple.com/HT214101

[citizen_friend → lapcat]

Yep, that was in the tweet. Got any more info about the exploit or why it’s not in their categories?

I presume some in the list did received bounties?

[lapcat → citizen_friend]

Here are the categories: https://security.apple.com/bounty/categories/

I'm not really sure what else you're asking for. Nobody in the world except Apple Product Security itself knows why Apple Product Security is refusing to pay a bounty in this case. It makes no sense.

[citizen_friend → lapcat]

Well. He knows more about the exploit. Maybe he could tell us what it is.

[lapcat → citizen_friend]

He did: https://twitter.com/R00tkitSMM/status/1790391961737711697

Satisfied now?

[citizen_friend → lapcat]

Updated from his twitter: apple apparently confirmed i am right and that it’s not exploitable in real user software. Still outraged?

[hnfong → citizen_friend]

I literally saved the link to this story in my "look again in a couple days" folder, and lo and behold, the story makes sense again.

[citizen_friend → lapcat]

Yep. It explains why he didn’t get paid.