Get rich quick! Work from home! Earn $100,000 easy – just find a critical flaw in Apple's sign-in system

Security researcher Bhavuk Jain has landed a $100,000 payday after he reported a critical flaw in Apple’s sign-in system that could be exploited to access countless accounts on sites from Dropbox and Spotify to Airbnb. In April, Jain discovered the vulnerability in “Sign in with Apple” – a single-sign-in service launched last …

[Anonymous Coward]

Bouquet to Jain, but ...

... a massive brickbat to Apple for this obvious design flaw getting past the test stage, let alone the design stage. That is ridiculously basic.

[Dinanziame]

Re: Bouquet to Jain, but ...

Remember goto fail? There's not a lot of testing done of these libraries, apparently...

[Blazde]

It's so dumb it must somehow be a clever staged marketing scheme to promote Apple's bug bounty programme, right? -.-

I feel cheated out of the gory technical details I was about to dive into.