Google has upped the ante in its industry-leading cash-for-security-bugs program with hefty bonuses and a hacking contest that will award up to $2 million worth of prizes to people who successfully exploit its Chrome browser.
On Wednesday, the search giant announced plans for Pwnium 2, a contest that will pay $60,000 for hacks that fully exploit its Chrome and Chromium browsers. The competition, scheduled for October 10 at the Hack In The Box security conference in Malaysia, will award smaller amounts for Chrome attacks that rely on code not native to the browser. For instance, a "partial Chrome exploit," such as one that combines a bug in Chrome's native code base with a bug in Windows, will be awarded $50,000. A "non-Chrome exploit" in Adobe Flash, Windows or other app will fetch $40,000.
"You may have noticed that we've compressed the reward levels closer together for Pwnium 2," Google software engineer Chris Evans wrote in Wednesday's blog post. "This is in response to feedback, and reflects that any local account compromise is very serious. We're happy to make the web safer by any means—even rewarding vulnerabilities outside of our immediate control."
Read 7 remaining paragraphs | Comments
DIGITAL JUICE
No comments:
Post a Comment
Thank's!