Slashdot Mirror
Google Raises the Ante at CanSecWest With $2.7M In Pwnium Prize Money
Trailrunner7 writes with this excerpt: "Building on the success of the last couple of years, Google plans to offer more than $2.7 million in potential rewards in the next iteration of its Pwnium hacking competition at this year's CanSecWest conference in Vancouver. The company has run the contest in parallel with the older Pwn2Own competition at the conference, with somewhat different rules, and this year plans to allow researchers to go after Chrome OS running on both ARM- and Intel-based Chromebooks. Pwnium began as Google's answer to Pwn2Own, the well-known hacking contest that has attracted some of the top researchers in the industry over the course of the last few years, including Dino Dai Zovi, Charlie Miller, Chaouki Bekrar and the Vupen team and many others. ... But the money that Google is putting up for new compromises of Chrome OS is far beyond what's available at Pwn2Own or any of the other major contests and has attracted a small, but elite, group of contestants in past years. The company is promising rewards of as much as $150,000 plus some bonuses, paid at Google's discretion, for especially innovative or serious exploits."
"Google plans to offer more than $2.7 million in potential rewards"...
Yeah and you can get guaranteed rewards selling them on the free/underground market.
You'll need a Google+ account for that...
From Google, "more than 2.7" means, well, you know what.
Either that or there's some kind advantage/avoidance loophole by being on the other side of the border.
Ahhhhh!
Anybody can do it as an AC.
...for an OS nobody really cares about. I can't for the life of me understand why I would want to use something that's less useful than my phone.
Sometimes a simple gift can create lots of magic that cannot be conveyed through the words. The people of whole world can now send their warm wishes and intimate love anytime anywhere in a day by just a single click of a computer mouse. Send Cakes and Chocolates Online Worldwide through online services and make people happy. A lot of online store are always ready to help their customers with faithful services and products. Show your love and affection with this splendid presents.
Are you even reading what you're replying to?
That's exactly what GP says - sure, you can go black hat and sell them underground, right until you get caught, or you can publish them legally at Pwnium or somesuch and get a nice item to add to your CV when you're looking for employment at "a research security company" as a really good programmer. Having fun stabbing strawmen there?
And your next point, without discussing appropriate pay for vulnerability disclosure, what do Google profits have to do with size of rewards? If you get a pay raise, does your utility company raise your power bill because you're making more money now?
PS: I'm going to ignore your "abusing open-source" line. I think I've seen you trotting this out before, but you never could coherently explain the nature of that "abuse" anyways.
PPS: I like it how you just fuse there/their/they're into "there". Most illiterates at least feel they should use different spellings for different meanings while writing a single post
PPPS: >"hacks" [as you call them, where I call them security vulnerabilities}
> selling there hack in the underground
It seems you be calling them "hacks" too when you're not trying to come across as smarter-than-you.
Just wondering who was the first to ever suggest bug-bounty rewards and hacking school? Do the search and do the math. :p
R.G.J.
THERE!!
There here! And there abducting literate children here, there and everywhere and making them illiterate! I see where there heading with this. There evil and I see what you did there.
Why are professional hackers called researchers?
Ponium, ownium, pyoonium?
the corporate sellout of everything sacred
Church of Google shuns you
Good discussion!