Google Up Ante For Disclosure Rules, Increases Bug Bounty 134
Posted
by
kdawson
from the responsibility-cuts-both-ways dept.
from the responsibility-cuts-both-ways dept.
An anonymous reader writes "In a recent post by seven members of their security team, Google lashed out against the current standards of responsible disclosure, and implicitly backed the recent actions of Tavis Ormandy (who is listed as one of the authors). The company said it believed 60 days should be an 'upper bound' for fixing critical vulnerabilities, and asked to to be held to the same standard by external researchers. In another, nearly simultaneous post to the Chromium blog, Google also announced they are raising the security reward for Chrome vulnerabilities to $3133.7, apparently in response to Mozilla's recent action."
Elite (Score:5, Funny)
Google also announced they are raising the security reward for Chrome vulnerabilities to $3133.7
That's quite the elite sum of money to use as a reward.
NERDS (Score:3, Funny)
NERDS!
I just found a bug... (Score:5, Funny)
I just found a bug in Gmail. We should talk.
Sincerely,
Chinese Hacker
Jeopardy! (Score:4, Funny)
I can only conclude that this Jeopardy! winner [youtube.com] now works for Google.
Re:I just found a bug... (Score:3, Funny)
3000 yuan is a fairly significant amount of money in China.
Karma be damned, but that's like bragging about being the skinniest kid at fat camp.