Slashdot Mirror

← Back to Stories (view on slashdot.org)

United Airlines Invites Hackers To Find Security Vulnerabilities

Posted by timothy on from the how-to-get-non-flyer-miles dept.

An anonymous reader writes: Following a recent spike of interest regarding the potential to hack planes, United Airlines has created the first rewards-for-exploits scheme in the aviation industry. The 'Bug-Bounty' program offers up to a million air miles for submitters who find a specific range of exploits in the company's websites and digital infrastructure. The scheme not only bans participants from probing on-board flight systems but threatens criminal prosecution for any such attempt.

3 of 54 comments (clear)

  1. bug bounty but no scanning by Anonymous Coward · · Score: 3, Insightful

    sounds odd they place the rule of no scanning of their network.
    how is anyone suppose to find out what the structure is without probing

  2. Translation by countSudoku() · · Score: 3, Insightful

    Translation: We can't afford (read: won't pay) for real security personnel, so we'll let strangers do it on a dare and not even to any interesting assets like a fucking plane! No, just hack our shitty web site and we'll offer you some "free miles" that will be highly restricted and next to worthless, but don't fear, wherever you end up going will be a horrible journey filled with ignorant TSA agents frisking your panties and smelling your shoes and then if your fucking pilot decides NOT to crash the plane into a building or a mountain you might end up killing yourself at your destination rather than face the social rape that is modern air travel.

    --
    This is the NSA, we're gonna geet U h@x0r5! Also, what is a h@x0r5?
  3. Re:wtf by spiritplumber · · Score: 3, Insightful

    Heh. The problem with half these contests is that two weeks later they say "No, contest over and if you publish a vulnerability we'll sue you".

    --
    Liberty - Security - Laziness - Pick any two.