Microsoft Widens Edge Browser Bug Hunt For Bounty Hunters (theregister.co.uk)

Microsoft said today it is expanding its program for rewarding those who find and report bugs in Edge, its latest web browser, enabling bounty hunters to claim their prize for a broader range of vulnerabilities. The Register adds: The snappily titled "Microsoft Edge Web Platform on Windows Insider Preview Bug Bounty Programme" was launched in August, and enabled anyone to report vulnerabilities they discover in Microsoft Edge in exchange for flippin' great wodges of cash. Now, the firm has expanded the programme, with a focus on vulnerabilities that lead to "violation of W3C standards that compromise privacy and integrity of important user data," or which enable remote code execution by a particular threat vector. Specifically, the bounty programme now covers the following: Same Origin Policy bypass vulnerabilities (such as universal cross-site scripting), Referrer Spoofing vulnerabilities, Remote Code Execution vulnerabilities in Microsoft Edge on Windows Insider Preview, and Vulnerabilities in open source sections of Chakra.

Comments

I.e.

[Anonymous Coward]

Open season.

Re:I.e.

[The-Ixian]

I.e.

No... Edge....

NIGGER BUGS FUCK NIGGER PAVEMENT APE ASS FOR GAY

[Anonymous Coward]

LOVE

G_N_A_A (G.A.Y NIG.GER ASSOCIATION OF AMERICA) is the first organization which
gathers G.A.Y NIG.GERS from all over America and abroad for one common goal - being G.A.Y NIG.GERS.

Are you G.A.Y ?
Are you a NIG.GER ?
Are you a G.A.Y NIG.GER ?

If you answered "Yes" to any of the above questions, then G_N_A_A (G.A.Y NIG.GER ASSOCIATION OF AMERICA) might be exactly what you've been looking for!
Join G_N_A_A (G.A.Y NIG.GER ASSOCIATION OF AMERICA) today, and enjoy all the benefits of being a full-time G_N_A_A member.
G_N_A_A (G.A.Y NIG.GER ASSOCIATION OF AMERICA) is the fastest-growing G.A.Y NIG.GER community with THOUSANDS of members all over United States of America. You, too, can be a part of G_N_A_A if you join today!

Why not? It's quick and easy - only 3 simple steps!

First, you have to obtain a copy of G.A.Y NIG.GERS FROM OUTER SPACE THE MOVIE and watch it.

You can watch G.A.Y NIG.GERS FROM OUTER SPACE on Youtube.

Second, you need to succeed in posting a G_N_A_A "first post" on slashdot.org , a popular "news for trolls" website

Third, you need to join the official G_N_A_A irc channel #G_N_A_A on EFNet, and apply for membership.
Talk to one of the ops or any of the other members in the channel to sign up today!

If you are having trouble locating #G_N_A_A, the official G.A.Y NIG.GER ASSOCIATION OF AMERICA irc channel, you might be on a wrong irc network. The correct network is EFNet, and you can connect to irc.secsup.org or irc.easynews.com as one of the EFNet servers.
If you do not have an IRC client handy, you are free to use the G_N_A_A Java IRC client by clicking here.

If you have mod points and would like to support G_N_A_A, please moderate this post up.

This post brought to you by Penisbird , a proud member of the G_N_A_A

G_____________________________________naann_______ ________G
N_____________________________nnnaa__nanaaa_______ ________A
A____________________aanana__nannaa_nna_an________ ________Y
A_____________annna_nnnnnan_aan_aa__na__aa________ ________*
G____________nnaana_nnn__nn_aa__nn__na_anaann_MERI CA______N
N___________ana__nn_an___an_aa_anaaannnanaa_______ ________I
A___________aa__ana_nn___nn_nnnnaa___ana__________ ________G
A__________nna__an__na___nn__nnn___SSOCIATION_of__ ________G
G__________ana_naa__an___nnn______________________ ________E
N__________ananan___nn___aan_IGGER________________ ________R
A__________nnna____naa____________________________ ________S
A________nnaa_____anan____________________________ ________*
G________anaannana________________________________ ________A
N________ananaannn_AY_____________________________ ________S
A________ana____nn_________IRC-EFNET-#G_N_A_A________ ________S
A_______nn_____na_________________________________ ________O
*_______aaaan_____________________________________ ________C
Gary Niger gary_niger@G_N_A_A.us G_N_A_A Corporate Headquarters 143 Rolloffle Avenue Tarzana, California 91356
Enid Al-Punjabi enid_al_punjabi@G_N_A_A.us G_N_A_A World Headquarters No.33 Kyutei Bld. 2F, Shinjuku 2-11-7, Shinjuku-ku, Tokyo, Japan ????????2??11-6
Copyright (c) 2003-2015 G.A.Y NIG.GER Association of America

Ich Bindawalross (

Finding bugs in Edge is like

[Billly Gates]

Finding real bugs ... in a swamp .... in Florida .... or Alaska on the tundra marshes

what about render bugs?

[Gravis Zero]

It's easy enough to make a fast render engine, it's difficult to make a fast render engine with standards compliant rendering.

Re:what about render bugs?

[Anonymous Coward]

They don't give a shit about rendering bugs, I've submitted tons and about 90% of them are labelled "wont fix" due to some BS reason... and yes my bugs have isolated test cases.

Re:what about render bugs?

[Anonymous Coward]

It's easy enough to make a fast render engine, it's difficult to make a fast render engine with standards compliant rendering.

Let's make a faster rendering engine, a great rendering engine, a yuge rendering engine. And make Microsoft pay for it.

Re:what about render bugs?

[KingMotley]

Well, the same can be pretty much said about both the webkit and gecko engines as well. I actually have more outstanding bugs in those engines than I do edge or IE, and they typically take a lot longer to get fixed than in IE/Edge. Sure, I might be an outlier, but that is my personal experience. I had one bug in firefox that has been outstanding for nearly 10 years, and every once in a while I see someone play with it, only to be kicked down the road further. webkit is pretty much the same, until years go by and then they get closed as wont-fix even though they all have short simple examples, and have been verified to be actual bugs.

And I'm not an anonymous coward. I call out the BS as I see it.

Fucking Register

[Anonymous Coward]

flippin' great wodges

Unreadable garbage, as usual.

PLONK

Obvious bug

[ChunderDownunder]

(or feature) It only runs on Windows 10.

If you're pushing for world domination, get the Android port released.

Re:Obvious bug

[Anonymous Coward]

Why? They have a monopoly on OSes running on non-exploding phones.

Running anything

[AHuxley]

Microsoft is the bug in any wider secure network.