Google launches new vulnerability reward platform
security.googleblog.com
Google launches new vulnerability reward platform
1–10 of 109 posts
Re: Google launches new vulnerability reward platform
#2It's here: https://bughunters.google.com/. Not sure which is the better top-level URL.
Re: Google launches new vulnerability reward platform
#3I didn't see anything regarding higher rewards. Have they increased them at all?
$29m for 10 years of bug fixes seem like a steal for a multi billion dollar company. Especially if some of those bugs that have been reported and fixed are potentially lethal for the company.
Re: Google launches new vulnerability reward platform
#4I take it you'll get more money selling bugs to other actors.
The story about the guy who only got $5k for owning Starbucks entire user database sticks in my mind.
Re: Google launches new vulnerability reward platform
#5I didn't see anything regarding higher rewards. Have they increased them at all? $29m for 10 years of bug fixes seem like a steal for a multi billion dollar company. Especially if some of those bugs that have been reported and fixed are potentially lethal for the company.
They pay what they need to pay. I'm sure they're also monitoring the dark web for black hats selling vulnerabilities instead of collecting bounties.
Re: Google launches new vulnerability reward platform
#6If only Google could run their other businesses as frictionless as this...
Found an interesting bug? Let's have a 1-1 chat over lunch, drinks are on us BTW.
Your developer account was banned by some bot gone wild? Sorry, no human interaction is allows in my department. Maybe if you have a famous buddy that can pester some hotshots on twitter...
Re: Google launches new vulnerability reward platform
#7I didn't see anything regarding higher rewards. Have they increased them at all? $29m for 10 years of bug fixes seem like a steal for a multi billion dollar company. Especially if some of those bugs that have been reported and fixed are potentially lethal for the company.
They pay what they need to pay. I'm sure they're also monitoring the dark web for black hats selling vulnerabilities instead of collecting bounties.
Google and Apple's bids weren't high enough to get anyone in dozens of shady governments with access to NSO Group's services to successfully risk adding burner phones and then analyze these attacks.
I think any alternative explanation to too cheap is even less savory.
Re: Google launches new vulnerability reward platform
#8Is it just me or does the graphic towards the end of the post misspell triage? I dont believe tirage fits at all for that use, but I could be wrong.
Re: Google launches new vulnerability reward platform
#9If only Google could run their other businesses as frictionless as this... Found an interesting bug? Let's have a 1-1 chat over lunch, drinks are on us BTW. Your developer account was banned by some bot gone wild? Sorry, no human interaction is allows in my department. Maybe if you have a famous buddy that can pester some hotshots on twitter...
[deleted]
Re: Google launches new vulnerability reward platform
#10Is it just me or does the graphic towards the end of the post misspell triage? I dont believe tirage fits at all for that use, but I could be wrong.
Report it as a bug and get that bug bounty!