[jim-greer]

I imagine if you find a good bug and aren't on their list, you could bring in someone who is to help out...

[jonknee]

... Or Apple could just be like every other bug bounty and pay out regardless of if you're on a white list or not.

[kefka]

Someone's always willing to pay.

It just might be in bitcoin on some .onion site :)