Microsoft Says No To Paying Bug Bounties

Posted by timothy on Friday July 23, 2010 @12:07AM from the like-mel-gibson-in-ransom dept.

Trailrunner7 writes "In the wake of both Mozilla and Google significantly increasing their bug bounties to the $3,000 range, there have been persistent rumors in the security community that Microsoft soon would follow suit and start paying bounties as well. However, a company official said on Thursday that Microsoft was not interested in paying bounties. 'We value the researcher ecosystem, and show that in a variety of ways, but we don't think paying a per-vuln bounty is the best way. Especially when across the researcher community the motivations aren't always financial. It is well-known that we acknowledge researcher's contributions in our bulletins when a researcher has coordinated the release of vulnerability details with the release of a security update,' Microsoft's Jerry Bryant said."

2 of 148 comments (clear)

Min score:

Reason:

Sort:

Or it could be because they would be bankrupt ... by MeNotU · 2010-07-23 00:09 · Score: 5, Funny

Or it could be because they would be bankrupt within the week.
Re:Or it could be because they would be bankrupt . by Anonymous Coward · 2010-07-23 00:30 · Score: 5, Funny

as well witnessed by the linux user who refers to it as "doing sex"