Google Also Offers More Money for Security Vulnerabilities
At the start of the year Google announced that, just like Mozilla who has the Mozilla Security Bug Bounty Program, it too is willing to pay for “interesting and original vulnerabilities” that the security research community uncovers in its products. At the time Google explained that it launched the Chromium Security Reward program to encourage new individuals to participate in Chromium security and to deter irresponsible vulnerability disclosure.
“We are introducing an experimental new incentive for external researchers to participate. We will be rewarding select interesting and original vulnerabilities reported to us by the security research community. For existing contributors to Chromium security — who would likely continue to contribute regardless — this may be seen as a token of our appreciation. In addition, we are hoping that the introduction of this program will encourage new individuals to participate in Chromium security,” said at the time Chris Evans, Google Chrome Security.
When Google launched this program it offered between $500 and $1,337 to researchers who uncovered “interesting and original vulnerabilities.” Mozilla used to offer the same amount - $500 plus a Mozilla T-shirt. But earlier this month Mozilla announced that $500 just isn’t enough to entice security researchers and upped that amount to $3,000.
At the time Director of Security Engineering, Lucas Adamski, said “We hope other organizations will match our program and actively support constructive security research.” That is precisely what Google did with its program; Google upped the amount of money it pays for vulnerabilities. If in the past Google offered a maximum of $1,337 it now offers $3,133.7.
“The maximum reward for a single bug has been increased to $3,133.7. We will most likely use this amount for SecSeverity-Critical bugs in Chromium. The increased reward reflects the fact that the sandbox makes it harder to find bugs of this severity,” announced Chris Evans, Google Chrome Security.
Details on Google’s Chromium Security program are available here.
Tags: Google, Chromium Security, Money
“We are introducing an experimental new incentive for external researchers to participate. We will be rewarding select interesting and original vulnerabilities reported to us by the security research community. For existing contributors to Chromium security — who would likely continue to contribute regardless — this may be seen as a token of our appreciation. In addition, we are hoping that the introduction of this program will encourage new individuals to participate in Chromium security,” said at the time Chris Evans, Google Chrome Security.
Advertising
When Google launched this program it offered between $500 and $1,337 to researchers who uncovered “interesting and original vulnerabilities.” Mozilla used to offer the same amount - $500 plus a Mozilla T-shirt. But earlier this month Mozilla announced that $500 just isn’t enough to entice security researchers and upped that amount to $3,000.
At the time Director of Security Engineering, Lucas Adamski, said “We hope other organizations will match our program and actively support constructive security research.” That is precisely what Google did with its program; Google upped the amount of money it pays for vulnerabilities. If in the past Google offered a maximum of $1,337 it now offers $3,133.7.
“The maximum reward for a single bug has been increased to $3,133.7. We will most likely use this amount for SecSeverity-Critical bugs in Chromium. The increased reward reflects the fact that the sandbox makes it harder to find bugs of this severity,” announced Chris Evans, Google Chrome Security.
Details on Google’s Chromium Security program are available here.
Tags: Google, Chromium Security, Money
I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 10 Feb 2012
With the release of Wolfram|Alpha Pro, the team behind the popular computational knowledge engine took a very big step forwardBy George Norman on 10 Feb 2012
Microsoft has just announced that this February, as part of the Patch Tuesday program, it will roll out a grand total of 9 security bulletins to all customers all over the world.Related News
By George Norman on 23 Jan 2012
The fifth edition of the Doodle 4 Google competition has kicked off and all K-12 students in the US are invited to take part in contestBy George Norman on 02 Sep 2011
Good news for users who were waiting for the stable version of Non-Admin Google Chrome Frame to be released: Google announced earlier this week that Non-Admin Google Chrome Frame has By George Norman on 16 Dec 2011
At the end of the year, the team behind incredibly popular search engine Google takes a look back and uncovers what the millions of users out there searched for the most, what caught the publics attention during the yearBy George Norman on 25 Jan 2012
People keeping track of these things will remember that back in the autumn of 2010 Google trimmed its privacy policies, that Google simplified and updated its privacy policies. Despite this fact, Google still has some Advertising
Hot Software Updates
Top Downloads
2.
Opera5.
Trillian8.
AIM9.
Skype10.
Ad-Aware12.
Nero13.
Google Earth14.
Picasa15.
Winamp16.
iTunes17.
RealPlayer18.
uTorrent19.
eMule20.
WinRAR21.
BitComet22.
WinZip23.
Shareaza24.
CCleaner25.
Recuva26.
Tweak UI27.
CuteFTP Home29.
Adobe Reader30.
NewsPiperBecome A Fan!
Link To Us!
Google Also Offers More Money for Security Vulnerabilities
HTML Linking Code
HTML Linking Code





