Make Some Money by Reporting Facebook Security Holes
Article by George Norman
On 05 Aug 2011
Popular social networking site Facebook, which according to the latest statistics has more than 750 million registered users, has decided to follow in the footsteps of Google and Mozilla and introduce a bug bounty program. This means that Facebook is giving security researchers the chance to earn some money. And when I say “some money” I mean at least $500.

Facebook explained that as part of its bug bounty program it will pay hackers upwards of $500 if they find security holes and report them to its security team – vulnerabilities that could compromise either the integrity or privacy of Facebook user data, like cross-site scripting (XSS), cross-site request forgery (CSRF) or remote code injection. The aforementioned amount of $500 is the base rate it will pay for security holes, clarified Facebook. A lot more money will be paid for “truly significant” security holes – just that Facebook did not say precisely how much.

Advertising

“In the past we’ve focused on name recognition by putting their name up on our page, sending schwag out and using this an avenue for interviews and the recruiting process,” said Alex Rice, Facebook’s product security lead. “We’re extending that now to start paying out monetary rewards.”

If you have a security hole and you would like to make some money by reporting it to Facebook, you need only visit this webpage. Click the link and you will be directed to Facebook page that asks a simple question: “Are you a security researcher?” Answer “No” and you will be directed to a generic quiz on security. Answer “yes” and you will be able to submit your security hole.

Please note that you will get the money only if you follow Facebook’s Responsible Disclosure Policy which states, among other things, that Facebook must be given reasonable time to respond before details of the vulnerability are released to the public.

Additional information on Facebook’s bug bounty program is available here.




Tags: Facebook, Security, Money
About the author: George Norman
George is a news editor.
You can follow him on Google+, Facebook or Twitter

I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 23 May 2013
Microsoft rolled out a new ad in which it uses Siri’s voice to highlight several things the iPad can’t do. This brings back memories of the famous “Get a Mac” ads that bashed Microsoft’s PCs.
By George Norman on 22 May 2013
The free 9GAG app for Android-powered devices has been updated to version 1.4 earlier this week. The update adds the option to upload posts to 9GAG from within the app.
Related News
By George Norman on 05 Dec 2012
avast! Antivirus is giving you the chance to win a Windows 8-powered Surface tablet or a license for avast! Internet Security by doing nothing more than playing a game on Facebook.
By George Norman on 29 Mar 2013
PopCap Games, a division of Electronic Arts, confirmed that two new editions of its Plants vs Zombies game will be rolled out to the public.
By George Norman on 16 Jan 2013
Popular social network Facebook recently introduced a new search engine called Graph Search. It is a personalized search engine that delivers content tailored to your profile.
By George Norman on 04 Feb 2013
The Linux Foundation recently announced that it is putting up a free ticket to LinuxCon North America or LinuxCon Europe and a $100 Linux.com Store gift card to celebrate the fact that it hits 100,000 fans on Facebook.
Advertising
Hot Software Updates
Top Downloads
Become A Fan!
Link To Us!
Make Some Money by Reporting Facebook Security Holes
HTML Linking Code