Slashdot Mirror
Microsoft Says No To Paying Bug Bounties
Trailrunner7 writes "In the wake of both Mozilla and Google significantly increasing their bug bounties to the $3,000
range, there have been persistent rumors in the security community that Microsoft soon would follow suit and start paying bounties as well. However, a company official said on Thursday that Microsoft was not interested in paying bounties. 'We value the researcher ecosystem, and show that in a variety of ways, but we don't think paying a per-vuln bounty is the best way. Especially when across the researcher community the motivations aren't always financial. It is well-known that we acknowledge researcher's contributions in our bulletins when a researcher has coordinated the release of vulnerability details with the release of a security update,' Microsoft's Jerry Bryant said."
Or it could be because they would be bankrupt within the week.
"we don't think paying a per-vuln bounty is the best way."
-- er
"We can't afford the hit to our bottom line if we were to start paying people to find the bugs in our software."
Mit der Dummheit kämpfen Götter selbst vergebens.
"We don't care, we don't have to...we're the operating system company."
About 15 years ago they made a long term investment to running their image into the ground so people would hate them so much that they would be willing to find the bugs for free. It's been working well for a long time, and at this point they have already written the check, why switch.
Microsoft sucks! I'll prove it, look at this random arbitrary glitch in the way they handle SMTP requests.
Thank you very much, fixed. Next!
Crazy like a fox (news anchor).
Microsoft: As good at security as Linux users are at doing sex with girls
as well witnessed by the linux user who refers to it as "doing sex"
Oh, we don't think it was immaculate...
... they were reminded that the user is the biggest security threat to any system. Upon considering their market share they realized how potentially disastrous this would be once anyone with a phone book figured it out.
...they've spent all their surplus cash paying people who forward Bill Gate's email message to 25 other people.
Well good for you! Now if we could just stop Windows users breeding ... ;-)
Finally! Someone used the word "loose" properly. Even if the meaning of the sentence is different than what you intended (I have no way of knowing), it's true nevertheless. They would have indeed loosed big money.
Free Martian Whores!
Well, my brother is gay. He's a geek, but definitely not into fitness. I have no idea about his attitudes in the bedroom however and I'd rather not find out :p
which is totally what she said