Apple introduces new restrictions for security reports
Tech giant Apple has introduced new rules for how security researchers may report bugs in the company's systems. As of June this year, there is now a cap on how many open cases an individual researcher may have active at the same time.
In addition to limiting the number of reports, Apple has also introduced a 30-day waiting period. This means that researchers must wait a certain amount of time before they can submit new reports after previous cases have been handled.
The changes are believed to be part of Apple's efforts to streamline the management of vulnerabilities as the company integrates more advanced technology, including AI, into its products. By limiting the number of open reports, the company hopes to be able to prioritize the most critical security issues.
For security researchers in Sweden and the rest of the world, this means a new work routine. It is now becoming more important to focus on more comprehensive reports rather than submitting a large number of minor bug reports in a short period of time.
It remains to be seen how these new guidelines will affect security work moving forward. Apple has not provided any detailed comments on how the new rules will affect their long-term collaboration with external experts.