Yahoo Bug Bounty Program is Now Live

#1

Post by michiel3 » Thu, Oct 31, 2013, 5:11 PM UTC

Yahoo Bug Bounty Program is Now Live
yahoodevelopers.tumblr.com

Re: Yahoo Bug Bounty Program is Now Live

#2

Post by tuananh » Thu, Oct 31, 2013, 5:39 PM UTC

Not long ago, there was a submission about a bug reporter didn't get any kind of reward (except a coupon) for reporting a bug for Yahoo!

Kudos to Yahoo! for listening to community's feedback.

Re: Yahoo Bug Bounty Program is Now Live

#3

Post by devx » Thu, Oct 31, 2013, 5:42 PM UTC

Someone you should tell them about the mother of all security bugs: NSA has full access to their datacenters.

They might want to fix that one first, before caring about the tiny little ones. It doesn't look like they are in a hurry to fix that one yet, though:

http://www.washingtonpost.com/blogs/the-switch/wp/2013/10/30...

Re: Yahoo Bug Bounty Program is Now Live

#4

Post by michiel3 » Thu, Oct 31, 2013, 5:48 PM UTC

tuananh wrote: post #2

Not long ago, there was a submission about a bug reporter didn't get any kind of reward (except a coupon) for reporting a bug for Yahoo! Kudos to Yahoo! for listening to community's feedback.

Relevant blog post by Yahoo! from earlier this month:

http://yahoodevelopers.tumblr.com/post/62953984019/so-im-the...

Re: Yahoo Bug Bounty Program is Now Live

#5

Post by ck2 » Thu, Oct 31, 2013, 8:15 PM UTC

A big yahoo bug is you cannot register an account without giving them a mobile phone number.

I don't own a mobile phone with a phone number.

Very strange way to register people.

Re: Yahoo Bug Bounty Program is Now Live

#6

Post by smoyer » Thu, Oct 31, 2013, 9:02 PM UTC

But I wanted the tee-shirt! (we're never happy)

Re: Yahoo Bug Bounty Program is Now Live

#7

Post by chriskelley » Thu, Oct 31, 2013, 9:49 PM UTC

smoyer wrote: post #6

But I wanted the tee-shirt! (we're never happy)

The rewards bullet point says you can still get a shirt if you want. Hope is not lost!

Re: Yahoo Bug Bounty Program is Now Live

#8

Post by fourstar » Thu, Oct 31, 2013, 10:25 PM UTC

ck2 wrote: post #5

A big yahoo bug is you cannot register an account without giving them a mobile phone number. I don't own a mobile phone with a phone number. Very strange way to register people.

Please email marissamayer@tumblr.com to claim your $15,000.

Re: Yahoo Bug Bounty Program is Now Live

#9

Post by alanbyrne » Thu, Oct 31, 2013, 10:57 PM UTC

Shame that Microsoft still have such a terrible bug bounty programme.

http://www.microsoft.com/security/msrc/report/bountyprograms...

Re: Yahoo Bug Bounty Program is Now Live

#10

Post by jfren » Fri, Nov 01, 2013, 10:10 AM UTC

"we promised to that our program will would address the following areas:"?!