Hacker News Reader

I'm not sure that's a mis-parse. Anyone could sign in with the Apple zero day.

If Apple launched a product called Apple Zero Day - like haveibeenpwned maybe - Then the top search results for apple exploits would be an advertisement :)

For anyone else wondering, the correct parse seems to be (Sign in with Apple) (Zero Day)

I did that too and wondered if they were finally offering a real bug bounty platform…

They have a bug bounty program: https://developer.apple.com/security-bounty/

I actually think they have a good approach. Rewarding major finds with good payouts and avoiding the flood of info and low level web app ‘bugs’.

I am well aware of the bug bounty program. I think it needs work.

I’m not a security researcher, but this guy got paid $100k. Seems to be working?

One example of a bug being fixed and a researcher being paid does not mean it works, generally.

Me too! For me it was because I've usually seen "zero day" written as "0day".

I think they were missing a colon, like one of those old-time jokes:

Sign in with Apple: zero day flaw