Slashdot Mirror

← Back to Stories (view on slashdot.org)

Does Microsoft Need Bug Bounties?

Posted by Soulskill on from the how-deep-are-their-coffers dept.

Gunkerty Jeb writes "The threats and attacks may have changed in the last decade, but one thing has remained constant: software giant Microsoft doesn't pay for vulnerabilities. Never has. Never will. Even as rivals like Mozilla and Google have introduced bug bounty program, the Redmond giant has stuck doggedly with a position it articulated almost a decade ago, refusing to offer monetary rewards for information on software holes. But security experts say that position may have to change."

1 of 100 comments (clear)

  1. Re:They'd be gone in a week by 0123456 · · Score: 5, Insightful

    And a lot of bugs can't be fixed because old applications rely on them and people only buy Windows for backwards compatibility.

    When I was writing Windows video drivers years ago we had to deliberately put bugs into our drivers to match the bugs in the stanadrd Windows drivers because various popular applications would fall over without them.