
image credit: pixabay
Infosec researcher Bhavuk Jain has pocketed a handsome $100,000 from Apple’s bug bounty program after reporting a critical flaw that could have allowed malicious actors to bypass authentication and take over a user’s account.
Released to much fanfare at the annual Worldwide Developers Conference (WWDC) in 2019, ‘Sign in with Apple’ enables users to log into a third-party account without disclosing their email address.