Slashdot Mirror


Microsoft Opens Vulnerability Bounty Program For Spartan Browser

jones_supa writes: As it did in the past when it tried to make Internet Explorer more secure, Microsoft has launched a new bug bounty program for Spartan browser, the default application of Windows 10 for surfing the information highway. A typical remote code execution flaw can bring between $1,500 and $15,000, and for the top payment you also need to provide a functioning exploit. The company says that it could pay even more than that, if you convince the jury on the entry quality and complexity. Sandbox escape vulnerabilities with Enhanced Protected Mode enabled, important or higher severity vulnerabilities in Spartan or its engine, and ASLR info disclosure vulnerabilities are also eligible. If you want to accept the challenge, Microsoft provides more information on how to participate.

7 of 53 comments (clear)

  1. I have a bug by slashmydots · · Score: 2

    "All your new crap is named after Halo and Minecraft so nobody will respect it."
    Is that considered a bug?

  2. Re:What? by jones_supa · · Score: 2

    I threw that intentionally there to give the summary some 1995 feeling. Hehheh.

  3. Sure, I'd love to help. by o_ferguson · · Score: 4, Interesting

    Just send me the source code.

    --
    - In Soviet Korea, only old people loose all their bases to Natalie Portman's petrified hot grits overlords.
  4. Alternatives? by johannesg · · Score: 3, Interesting

    How much is the Russian maffia or the Chinese government offering? Before we make any decisions on what the best economic choice is we should be aware of all the alternatives...

  5. Re: Security issue 2 by Opportunist · · Score: 2

    So do I. Without MS, I'd probably be out of a job.

    Seriously, people. MS is a lifesaver for me. And everyone else in IT security.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  6. 1.5-15k? For real? by Opportunist · · Score: 4, Interesting

    Do you have a FAINT idea what a 0day, remote code execution bug in IE sells for?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  7. Re:BS time by ruir · · Score: 2

    Me neither, but that just validates my initial point they are just changing the name of a very hated project, and throwing to our ears the usual crap. https://www.youtube.com/watch?...