An Interest In:
Web News this Week
- April 25, 2024
- April 24, 2024
- April 23, 2024
- April 22, 2024
- April 21, 2024
- April 20, 2024
- April 19, 2024
Some of Our Sources
- Team Treehouse
- Just Creative
- Joshua Blankenship
- Spoon Graphics
- Smashing Apps
- TutsPlus - Design
- 24 Ways
- CSS Tricks
- Spyre Studios
- Dev To
Help Webnuz
Referal links:
February 5, 2014 06:25 am GMT
Google has long run a rewards program for security researchers who find vulnerabilities in its software. Today, the company is extending thisprogram to also cover its Chrome apps and extensions. These include extensions for Hangouts, Screen Capture, Google Translate, PageSpeed Insights and many others. The rewards for developers who find security vulnerabilities range from $500 to $10,000, depending on how grave the issue is. Most of Google’s other rewards programs top out at $20,000. In the announcement, Google Security Team membersEduardo Vela Nava and Michal Zalewski point out that they believe “developing Chrome extensions securely is relatively easy,” but because many of these apps are also very widely used, “we want to make sure efforts to keep them secure are rewarded accordingly.” Besides this new program, Google is also increasing the rewards of its Patch Reward Program, which rewards patches that secure widely used, open-source software like OpenSSH, libjpeg, Chromium and security-critical components in the Linux kernel. Developers can now earn up to $10,000 for “complicated, high-impact improvements that almost certainly prevent major vulnerabilities in the affected code.” More moderately complex patches will come in at $5,000, and very simple submissions will be rewarded with between $500 and $1,337. After launching the Patch reward program last October, Google quicklyextended this program to include the Android open source project just a month later. At that time, rewards still topped out at $3,113.70. Officially, this program is still “experimental,” but given the increase in reward levels, it looks like Google is ready to keep it going for quite a while. Image credit: 401(K) 2012 on Flickr.
Original Link: http://feedproxy.google.com/~r/Techcrunch/~3/JLnATN6oHio/
Google Extends Security Rewards Program To Cover Its Own Chrome Apps And Extensions, Ups Reward Level For Open-Source Patches
Google has long run a rewards program for security researchers who find vulnerabilities in its software. Today, the company is extending thisprogram to also cover its Chrome apps and extensions. These include extensions for Hangouts, Screen Capture, Google Translate, PageSpeed Insights and many others. The rewards for developers who find security vulnerabilities range from $500 to $10,000, depending on how grave the issue is. Most of Google’s other rewards programs top out at $20,000. In the announcement, Google Security Team membersEduardo Vela Nava and Michal Zalewski point out that they believe “developing Chrome extensions securely is relatively easy,” but because many of these apps are also very widely used, “we want to make sure efforts to keep them secure are rewarded accordingly.” Besides this new program, Google is also increasing the rewards of its Patch Reward Program, which rewards patches that secure widely used, open-source software like OpenSSH, libjpeg, Chromium and security-critical components in the Linux kernel. Developers can now earn up to $10,000 for “complicated, high-impact improvements that almost certainly prevent major vulnerabilities in the affected code.” More moderately complex patches will come in at $5,000, and very simple submissions will be rewarded with between $500 and $1,337. After launching the Patch reward program last October, Google quicklyextended this program to include the Android open source project just a month later. At that time, rewards still topped out at $3,113.70. Officially, this program is still “experimental,” but given the increase in reward levels, it looks like Google is ready to keep it going for quite a while. Image credit: 401(K) 2012 on Flickr.Original Link: http://feedproxy.google.com/~r/Techcrunch/~3/JLnATN6oHio/
Share this article:
Tweet
View Full Article
Techcrunch
TechCrunch is a leading technology blog, dedicated to obsessively profiling startups, reviewing new Internet products, and breaking tech news.More About this Source Visit Techcrunch