Chrome 4.0.249.89 Update: Security Fixes, Reward Money
The Google-developed Chrome browser has been updated to version 4.0.249.89 (the Windows version). The update comes with several bug and security fixes, so if you are using Google Chrome, you would do well to update. Among the various security holes that Chrome 4.0.249.89 for Windows plugs (4 high, 2 medium) there is one that Google described as “Domain confusion populating HTTP authentication dialog.” This vulnerability, which is rated as “medium”, has been uncovered by one Timothy D. Morgan.
Here’s the interesting part. Timothy D. Morgan is the first to get paid by Google for uncovering a problem with Google Chrome. Earlier this month , the Mountain View-based search engine giant launched an interesting invitation to all security experts out there: find a bug or vulnerability and win between $500 and $1337.
“We are introducing an experimental new incentive for external researchers to participate,” said at the time Google Chrome Security team member, Chris Evans. “We will be rewarding select interesting and original vulnerabilities reported to us by the security research community. For existing contributors to Chromium security — who would likely continue to contribute regardless — this may be seen as a token of our appreciation. In addition, we are hoping that the introduction of this program will encourage new individuals to participate in Chromium security.”
For uncovering the “Domain confusion populating HTTP authentication dialog” vulnerability, Google awarded Timothy D. Morgan a $500 cash prize. What did Morgan decide to do with it? He did not go out and celebrate, if that’s what you’re thinking. He decided to donate it to the Haiti relief effort. It is not exactly a huge amount of money, but hey, every little bit helps. Google, in recognition of his selfless act, decided to up the prize from $500 to the maximum amount of $1337.
Here’s the interesting part. Timothy D. Morgan is the first to get paid by Google for uncovering a problem with Google Chrome. Earlier this month , the Mountain View-based search engine giant launched an interesting invitation to all security experts out there: find a bug or vulnerability and win between $500 and $1337.
“We are introducing an experimental new incentive for external researchers to participate,” said at the time Google Chrome Security team member, Chris Evans. “We will be rewarding select interesting and original vulnerabilities reported to us by the security research community. For existing contributors to Chromium security — who would likely continue to contribute regardless — this may be seen as a token of our appreciation. In addition, we are hoping that the introduction of this program will encourage new individuals to participate in Chromium security.”
For uncovering the “Domain confusion populating HTTP authentication dialog” vulnerability, Google awarded Timothy D. Morgan a $500 cash prize. What did Morgan decide to do with it? He did not go out and celebrate, if that’s what you’re thinking. He decided to donate it to the Haiti relief effort. It is not exactly a huge amount of money, but hey, every little bit helps. Google, in recognition of his selfless act, decided to up the prize from $500 to the maximum amount of $1337.
