

News Archive
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
October 2009
September 2009
August 2009
July 2009
June 2009
May 2009
April 2009
March 2009
February 2009
December 2008
November 2008
October 2008
September 2008
August 2008
July 2008
June 2008
May 2008
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
Free Cash: Find a Bug in Google Chrome
January 29, 2010, 12:59 pm
Everybody wants free money, right? Well, here’s one way to get it: find a bug in Google Chrome or Chromium, the open source code database behind the browser. Google is offering intrepid developers from $500 for pointing out “select interesting and original vulnerabilities.” The maximum award is $1337—no, seriously. You guys are just so freaking funny.
Of course, not just any bug will do—no need to spell check the GUI. The goal is to minimize security vulnerabilities in the browser, so only bugs along those lines will be eligible. They’re focusing on “high and critical impact” bugs, but “clever vulnerabilities” of any security level would be . To submit the bug, just use the usual Chromium bug tracker with the Security Bug template.
The maximum payout, of course, is reserved for bugs whose impact would be severe if not fixed. The dollar amount is a “clever” nod to the leet speak used among hackers. In the blog post, Google gives a nod to their inspiration, the Mozilla vulnerability reward program.
Most developers will be eligible to participate, however, “residents of countries where the US has imposed the highest levels of export restriction (e.g. Cuba, Iran, North Korea, Sudan and Syria)” cannot receive rewards, nor can minors (though Google says they’ll work with an adult representing a minor). Participants are also asked not to publicly disclose reported bugs until Google addresses them—then they’re free to speak openly.
What do you think? Did your weekend plans just change
?






