General
|
Written by Daniel
|
Friday, 12 January 2007 07:56 |
iDefense Offers Bounty for Vista, IE7 Bugs DarkReading
JANUARY 10, 2007 | Psst. Wanna win $8,000 to $12,000?
iDefense Labs is holding a contest for hackers to come up with remote, arbitrary code-execution bugs in Microsoft Windows Vista and Internet Explorer 7. iDefense, which is part of VeriSign, will pay $8,000 for each vulnerability submitted that lets an attacker exploit code remotely on either of the two products. And if you write a working exploit for the winning vulnerability, iDefense will throw in another $2,000 to $4,000.
But no malicious payload, please: That disqualifies your exploit. iDefense will pay $8,000 for up to six bug submissions.
This isn't the first time iDefense has held bug contests. These are quarterly events at the security company; its most recent challenge to researchers was for instant messaging, and previous competitions offered cash for Windows flaws. Paying hackers for finding software bugs remains a controversial practice, and it plays into the "responsible" disclosure debate as well.
Comments in the forums
|