Security researchers can now earn money by finding bugs in the Arc browser, the company has revealed.
The Browser Company, the owners and maintainers of the software, have announced a new bounty program to help them plug dangerous holes.
Rather unimaginatively called the Arc Bug Bounty Program, users can hunt for bugs on macOs and Windows, and in the Arc Search on the iOS platform.
Arc browser flawsDepending on the severity of the vulnerability discovered, the researchers can expect different payouts.
Low-severity issues can earn them up to $500, medium ones anywhere between $500 and $2,500, while high ones pay out between $2,500 and $10,000. Discovering a critical vulnerability, which grants full system access or can otherwise result in significant impact, pays out anywhere between $10,000 and $20,000.
The Browser Company decided to set up its own bug bounty program after being tipped off about CVE-2024-45489.
This was a critical vulnerability affecting versions before 2024-08-26, allowing for remote code execution through JavaScript boosts. In the Arc browser, "Boosts" are tools that allow users to customize websites by changing their appearance or functionality.
The problem arises from misconfigured Firebase Access Control Lists (ACLs), which allow attackers to create or update a JavaScript boost using another user's ID. This leads to the malicious installation of the boost in the victim's browser, where it runs arbitrary code with elevated privileges. Despite the severity, this vulnerability is categorized as a "no-action" issue, meaning there are zero affected users due to cloud protections. This is also probably why the researcher who disclosed the vulnerability was only awarded $2,000 for their discovery.
The bug was addressed in late August 2024, by disabling auto-syncing of Boosts with JavaScript. Furthermore, late last month, the team added a toggle to turn off all Boost-related features.
Via BleepingComputer
More from TechRadar ProNewsflash for most of you upgrading to iOS 18: You're not getting Apple Intelligence.
I visited my parents last week and noticed they have a pair of still-fresh-looking iPhone 14 Pro Max phones. I commented on the handsets, and my parents asked about the new iPhone 16 Pro Max I was carrying. We talked about some of the new features, like the Camera Control ("It's like a real camera!"), and I pressed and held the power button to show them Siri's new look. Later, I showed my father how I could remove some folding chairs from the background of a photo. It was then I realized that both of them thought they were getting Apple Intelligence on their phones.
When I explained that their phone would not get the new Siri, image Clean Up, or various other Apple Intelligence features, they were shocked and, I think, dismayed. This is an awareness problem for Apple and one it must solve ASAP.
For perhaps the first time in Apple’s history, it’s creating a platform-level situation of haves and have-nots.
Not the parity you expectMost Apple users understand they don't get new iOS features if they don’t upgrade. Still, I can’t recall an instance where people running the same version of iOS will not have the same experience, especially those running still relatively new hardware.
Okay, to be fair, neither one of them (both around 80) fully understood the details of Apple’s take on artificial Intelligence. Even so, I had to explain to them that while their iPhones are still quite new and have excellent cameras and powerful A16 Bionic CPUs, their phones are not designed to support Apple Intelligence.
Now, as the days tick down to the first significant Apple Intelligence release (expected in October), it occurs to me that there are potentially millions of iPhone owners who are eligible to upgrade to iOS 18 but will not get Apple Intelligence because their iPhones are not running at least last year’s A17 Pro CPU.
Apple admirably extends platform updates to iPhones up to seven years old, including Phone XS, iPhone XR, Phone 11, iPhone 12, iPhone 13, iPhone 14, iPhone 15, iPhone 16, and iPhone SE (at least second generation).
The less intelligentLooking at it that way, arguably a billion iPhones might be getting this upgrade, but only a fraction can run Apple Intelligence. Apple hopes that everyone upgrades just to get access to this Cupertino brand of Apple intelligence.
I don’t see that happening. Not necessarily because people don’t want to upgrade, but if they like their current iPhone and know it can handle the latest iOS 18 update, they might not think they need to. Based on my completely unscientific and non-projectable sample, I surmise that they don’t know the limitations of their current iPhone and, like my parents, will be disappointed when they realize that the major iOS update they just installed provides them with exactly zero Apple Intelligence.
As for my parents, I think they were most upset about not getting a much smarter Siri. This was the one part of Apple Intelligence they fully understood, possibly because my mother is constantly asking Siri questions (and often getting frustrated with the results). She was looking forward to a digital assistant that finally got things right.
It’s that moment when people discover that their updated iPhone, while better because of the myriad changes that come with iOS 18 (new Control Center, Home Screen editing, Passwords app), will be missing the thing Apple is spending millions to promote on TV, billboards and social media.
Apple needs some better messaging and it should happen before Apple Intelligence arrives this month.
You might also likeLast month, OpenAI infused ChatGPT with new o1-preview and o1-mini models that it said would "spend more time thinking before they respond" – and it seems like Google isn't too far behind with its own deep-thinking AI.
As per Bloomberg, Google is also developing artificial intelligence that more closely resembles a human's ability to reason, most probably for its Gemini platform. For the time being, Google has made no official comment.
Through the way that they don't rush to a response quite so fast, these models are said to be better at solving problems that involve multiple steps, in fields such as math and coding. Judging by the restrictions OpenAI has put on the o1 models, it also uses up more processing power and energy.
Bloomberg doesn't say when Google might launch its thinking AI, but progress has apparently been made "in recent months," assuaging concerns inside the company that it was falling behind OpenAI. And that sounds to us like we'll be seeing some of this technology sooner rather than later.
I think, therefore AI The o1 model is in an early preview (Image credit: OpenAI)Technically, these newer models make use of what's known as chain-of-thought prompting: the AI is essentially working through several steps and considering multiple responses, as well as debating with itself about the right solution.
With ChatGPT and the o1 models, you get the message "thinking" while the AI works through all of this. Based on the tests we've run, it is better than the GPT-4o model for solving riddles and working through more complex problems.
Presumably, whatever Google has in the pipeline will take a similar approach. For now, OpenAI has restricted the o1-preview and o1-mini to users who pay for a ChatGPT subscription, so it'll be interesting to see if the Google equivalent requires a Gemini Advanced plan (yours for $19.99 / £18.99 / AU$32.99 a month).
According to Bloomberg, Google's AI development plans are being slowed by ethical concerns, wanting to appear trustworthy, and having competing interests within its vast organization – but with OpenAI, Meta, and Microsoft all busy with their own AI upgrades, the pressure is on.
You might also like