Slashdot Mirror

← Back to Stories (view on slashdot.org)

Bug Bounty Hunters Weigh In On Google's Vulnerability Reporting Program

Posted by samzenpus on from the professional-swatter dept.

An anonymous reader writes "InfoWorld reached out to three security researchers who participate in Google's vulnerability reporting program, through which the company now offers as much as $20,000 for bug reports. They provided some insightful perspectives on what Google (and other companies, such as Mozilla) are doing right in paying bounties on bugs, as well as where there's some room for improvement."

1 of 24 comments (clear)

  1. Re:Rest of the world. by jesser · · Score: 4, Informative

    Mozilla, Google, and Facebook all offer bounties to researchers outside the US.

    * Mozilla has awarded bounties to researchers in several European countries.

    * Google says: “We are unable to issue rewards to individuals who are on sanctions lists, or who are in countries (e.g. Cuba, Iran, North Korea, Sudan and Syria) on sanctions lists.”

    * Facebook says: “You must... Reside in a country not under any current U.S. Sanctions (e.g., North Korea, Libya, Cuba, etc.)”

    Which bounty programs are restricted to the US?

    --
    The shareholder is always right.