According to the report, a Google employee wrote in the comments section in the report that the bug was originally found by an Apple employee who was participating in a Capture The Flag (CTF) hacking competition in March. While this is not the first time that an Apple employee has found a zero-day bug in a Google product, it may be different if the Apple employee did not report the bug.
The bug was reported to Google by someone else who also participated in the competition, and the company employees didn’t actually find the bug themselves, and wasn’t even on the team that found the bug.
What is a zero-day bug
A zero-day is a bug or flaw that the company is not aware of and needs to be patched. In this case, it meant that Google wasn’t aware of the bug and no patch had been issued yet.
What Google employee wrote
“This issue was reported by sisu from CTF team HXP and discovered by a member of Apple Security Engineering and Architecture (SEAR) during HXP CTF 2022,” the Google employee wrote. It’s unclear why the Apple employee did not report the bug back in March. Google spokesperson Ed Fernandez told TechCrunch in an email that “our understanding is public in the bug.” “We [recommend] reaching out to Apple for any further details,” Fernandez wrote.
In the original report on March 26, the person who reported it said that the bug was found by someone on the team COPY during a CTF organized by the team XHP. The person, whose name has not been disclosed in the report, said they that decided to report it even if they didn’t find it themselves because they were “not 100% sure it was reported to the chromium team.” “So I wanted to be safe,” the person wrote as per the report.
The bug was fixed on March 29 and Google decided to award $10,000 as a bug bounty to the person who reported it, this means not the Apple employee who found it.
function loadGtagEvents(isGoogleCampaignActive) { if (!isGoogleCampaignActive) { return; } var id = document.getElementById('toi-plus-google-campaign'); if (id) { return; } (function(f, b, e, v, n, t, s) { t = b.createElement(e); t.async = !0; t.defer = !0; t.src = v; t.id = 'toi-plus-google-campaign'; s = b.getElementsByTagName(e)[0]; s.parentNode.insertBefore(t, s); })(f, b, e, 'https://www.googletagmanager.com/gtag/js?id=AW-877820074', n, t, s); };
window.TimesApps = window.TimesApps || {}; var TimesApps = window.TimesApps; TimesApps.toiPlusEvents = function(config) { var isConfigAvailable = "toiplus_site_settings" in f && "isFBCampaignActive" in f.toiplus_site_settings && "isGoogleCampaignActive" in f.toiplus_site_settings; var isPrimeUser = window.isPrime; if (isConfigAvailable && !isPrimeUser) { loadGtagEvents(f.toiplus_site_settings.isGoogleCampaignActive); loadFBEvents(f.toiplus_site_settings.isFBCampaignActive); } else { var JarvisUrl="https://jarvis.indiatimes.com/v1/feeds/toi_plus/site_settings/643526e21443833f0c454615?db_env=published"; window.getFromClient(JarvisUrl, function(config){ if (config) { loadGtagEvents(config?.isGoogleCampaignActive); loadFBEvents(config?.isFBCampaignActive); } }) } }; })( window, document, 'script', );
For all the latest Technology News Click Here
For the latest news and updates, follow us on Google News.