Google Offers $1 Million For Chrome Exploits 63
PatPending writes with news that Google will be offering up to $1 million for the discovery of new exploits in their Chrome browser. This comes as part of the CanSecWest security conference, and the rewards will be broken down into categories: $60,000 for an exploit using only Chrome bugs, $40,000 for an exploit using a Chrome bug in conjunction with other bugs, and $20,000 for exploits that affect Chrome (and other browsers) but are due to bugs in other software, like Flash, Windows, or drivers. Google had originally planned to offer rewards through the Pwn2Own competition, but they were concerned by the contest rules: "Unfortunately, we decided to withdraw our sponsorship when we discovered that contestants are permitted to enter Pwn2Own without having to reveal full exploits (or even all of the bugs used!) to vendors. Full exploits have been handed over in previous years, but it’s an explicit non-requirement in this year’s contest, and that’s worrisome. ... We guarantee to send non-Chrome bugs to the appropriate vendor immediately."
Re:Return On Investment (Score:5, Funny)
Probably, but full disclosure of vulnerabilities has a substantially lower chance of lower chance of leading to you getting repeatedly anally raped. I can't put an exact dollar amount on what that's worth, but it's pretty damn high.
Re:What Google doesn't like, it replaces... (Score:4, Funny)
Yes, Vista did have honest to goodness suckage, but most of the complaints centered around the fact that they actually fixed their security
Removing all of the wheels makes a car much more secure. It just makes for a shitty car.
Unless it's a flying car, which would be cool.
Unless the flying car had bugs in the code which made it able to fly, which would be uncool.
But reporting these bugs for money, so you could buy another flying car would be cool.
i see a vicious cycle developing