Skip to main content

Bug hunters: so you can live by analyzing the code of the big companies

All computer programs and software have failures.The important thing is to detect and correct them in time.No matter how much time has been spent testing with programs or systems, the truth is that, when they go on the market, failures are always reported.The same goes for online applications and services: they have problems that need to be solved, which is why large companies reward bug hunters , which help them correct problems with their systems and applications.


The most juicy rewards are those that can compromise the security of the systems, so they are the ones that attract the attention of a greater number of researchers.Within them there are two types: those that focus on the problem search with a very technical approach, and then there are those who try to think like the bad ones .


The company Bugcrowd has a list with the main companies that offer some kind of reward and the type in question.In this sense, it can be an honorable mention or enter into what they call the "Hall of fame" of the company, loot or reward, which are usually monetary and depend on the amount offered.The truth is that is usually paid based on the importance of the failures found .


The Google hackaton


Google has recently presented a Hackaton for Android , called Project Zero, in which researchers who manage to find vulnerabilities in the company's operating system are eligible for a prize of 200,000 dollars.a prize of 100,000 and 50,000 dollars the second and third.


The objective is to see to what extent an investigator can find vulnerabilities, but also see how bad boys operate when discovering them, what paths they follow, etc.For this, all participants need Deliver a technical document detailing how you found the problem.


Microsoft, its Insiders program and the rewards for Bugs hunters


Bug hunters: so you can live by analyzing the code of the big companies


To debug its updates and new operating systems, Microsoft has a program called Insiders.Those enrolled in it can try the news of the Redmond company in exchange for reporting usage reports, which will serve to detect possible problems before removing it to production.In spite of this great program of betatesters , other problems can occur.I nsiders is focused on finding bugs that affect the operation of systems and programs .


The Windows developer has generously rewarded those who have made some security discovery or contribution. Offers up to 100,000 dollars to those who find security errors that put their software at risk This is the case of James Forshaw, a researcher at the British company Context Information Security, who took the reward for finding an error that skipped some protections included in the previous version of Windows 8.1.


Vasilis Pappas, a student who was a student at Columbia University at the time, took about $ 200,000 to design an innovative security prototype to prevent the exploitation of memory security vulnerabilities in Windows applications.


Facebook also rewards hackers and bug hunters


Bug hunters: so you can live by analyzing the code of the big companies


Facebook has paid more than a million dollars in bug hunter rewards.An example of this is Reginaldo Silva, a systems engineer from Brazil who found one of the worst vulnerabilities within the software from Facebook, achieving a reward of $ 30,000.


This happened as a result of the publication of a letter in the profile of Mark Zuckerberg by an investigator who did not want to pay to find this vulnerability of the service.looking for rewards.On an economic level, the truth is that a million dollars is very little for the image problems that the company may have if the vulnerability is published.


United Airlines pays with airline miles to report bugs


In other cases, companies pay in kind, that is, in what they sell.If United Airlines operates, which rewards with air miles, that is, with free trips, to those investigators who report bugs.The scale ranges from 50,000 miles for a low-level error, going through 250,000 for reporting personal data leaks or the leap of authentication and up to 1,000,000 miles for more serious vulnerabilities.


Apple's policy change in bug hunter rewards


Bug hunters: so you can live by analyzing the code of the big companies


A striking case is that of the Cupertino company, which did not reward the hunters of bugs, but recently this policy has changed offering up to 200,000 dollars for finding security problems in its applications and system This means greater security for users, as vulnerabilities found in both iOS and their desktop system will be adequately rewarded and, more importantly, patched.


The truth is that the work of the security researcher has a lot to do with analytics.The reward is only seen at the time of finding the problem, but the amount of hours behind analyzing code and the behavior of the programs It is immense, and in many cases the access to the source code of the programs is not available for researchers, which also complicates their work.

Comments

Popular posts from this blog

Internet of plants: a tomato knows as much about networks as you

The possibility of plant species communicating through complex networks, what some scientists have called the internet of plants , is an issue that has been discussed for a long time, at least 20 years.It was in 1997 when the scientist Suzanne Simard , from the University of British Columbia in Vancouver (Canada), published a study in the journal Nature on how Forest plants use complex systems where species exchange nutrients, send warning signals and relate to the environment. Although there is no scientific consensus, several investigations seem to support this hypothesis.If confirmed, as we read in a fascinating report by the Sinc Agency, the forests would act as huge structures that are articulated under the soil through a network in which factors invisible to the human eye interact and can determine the future of the climate.Understanding how it works is the challenge that even science faces. internet of plants and the wisdom of forests The premise of Suzanne Simard ...

New setbacks for conspiranoicos: radiofrequencies do not affect health

New evidence published by the Scientific Advisory Committee on Radio Frequency and Health (CCARS) in its 2016 Radio Frequency and Health Report indicates that there are no adverse health effects derived of exposure to radio frequencies emitted by mobile phone antennas or radio and television broadcasting.No evidence has been found on the danger in wireless systems (Wi-Fi) or airport scanners. The new 2016 Radio Frequency and Health Report collects, updates and analyzes the scientific evidence on the subject for the period between January 2013 and June 2016. radio frequencies are not dangerous According to the conclusions of the report " the critical analysis of the evidence supports that there are no technical or sanitary reasons that justify the arbitrary and discretionary imposition of more demanding exposure limits than those recommended by WHO-ICNIRP and the Union European ", while the application of more restrictive limits" would imply increasing the n...

GIF history: where they come from and where they are going

Funny, witty, curious... GIFs have already become a regular resource in social networks and messaging applications and have become part of our daily lives and jokes.It is an image format that has evolved significantly throughout its history and is experiencing a new awakening. In fact, to find its origins, we must go back more than twenty years ago .A moment in which they had little to do with what we know today and an evolution that we could not stop review.So let's find out where they come from and try to catch a glimpse of where they are going. What is a GIF The word GIF responds to the acronym of Graphics Interchange Format , or what is the same, graphic exchange format.A term for the graphic format used in the network for both static images and animations.In more concrete terms, it supports 8 bits per pixel and allows you to display images with up to 256 colors simultaneously-limited by a palette of 16 million-. This particularity makes it a perfect ally of infogr...

Amazon Prime Video arrives in Spain: this is all you need to know

That during the last years there has been a change in the way we enjoy audiovisual content is an obvious reality, as reflected by the huge popularity of streaming services like Netflix and the like.A context in which new competitors are constantly added and that, after the landing of this company in our country just over a year ago, is in full transformation. In fact, today we have learned of the incursion of a new protagonist in this area.Yes, because Amazon Prime Video has just arrived in Spain .A landing that takes place only two weeks away that of HBO, which culminates in a 2016 sown of changes.But, what exactly does it consist of? What advantages and disadvantages does it have compared to the "of its kind"? WHAT AMAZON PRIME VIDEO OFFERS The type, quality and quantity of movies and series offered by the service will be key when determining your success.A catalog a priori smaller than that of HBO and Netflix, but in which we find titles like Seinfield , Into...

What we know and what we suspect in the new Facebook algorithm change

"In my time, we read the newspaper in Facebook ".By 2020, nostalgia has taken over billions of people.In its memory, 2018, when Facebook stopped being Facebook to become Facebook again.Paraiso of engagement for brands and media, land paid for clickbaits and fake news, the social network of Mark Zuckerberg has given a rudder to his algorithm. He wants to return to his origins .And this is what will happen. Related If something goes well, to change it.40.653 million dollars entered in 2017.More than 2.100 million active users per month, a quarter of the world's population.But Zuckerberg is not one of those, of which they are.Want a Facebook with more social connections between people and less presence of brands and media .And what do your users want? Nearly two-thirds of American adults consume news on social networks.More than half do so on their Facebook walls.Pew Research Center data points to a clear trend: Facebook is becoming a media platform.54% of Facebook u...

No kidding: selfitis exists and can be a problem

Sometimes one thinks that social networks were created to share photos of faces putting on little bones and images of dishes overflowing with appetizing foods or, better, of faces putting little bones in front of plates overflowing with appetizing foods in the same shot.is to see faces, faces, faces...all of them smiling, as if looking at the smartphone mirror was the height of happiness.And it does not seem that there are so many beautiful and happy people, or maybe yes, that you go Namely.What envy. Well, what we're going to do: Janarthanan Balakrishnan psychologists from the Thiagarajar School of Management in India; and Mark D.Griffiths, of the Nottingham Trent University, in the United Kingdom, have published an article in the International Journal of Mental Health and Addiction entitled 'A study on' Selfitis', which names this mania of going around the world taking pictures of oneself, as if beyond our curls the world had been destroyed by that meteorite th...

Twitter shows the best of ourselves (it wasn't always going to be the worst)

In the era of social networks, accustomed to interact daily with Facebook, Twitter, Instagram, Google or WhatsApp, we forget that these tools are phenomenal in the History of Humanity capable of mobilize hundreds of thousands of people in very different geographical locations in a matter of hours or even minutes. Already in the past, Twitter has asserted its more social dimension to mobilize people, companies or organizations and also, from a broader perspective, feelings of solidarity and support or also of rejection and repulses towards causes with an important mediatic impact.Recently, Twitter was once again the engine of solidarity after Dortmund's explosions as the Borussia Dortmund team bus passed on its way to the local stadium on the occasion of the Champions League match between the Borussia and the Monaco. These explosions did not have the devastating effect that they could have caused , so that everything remained in a major social commotion at international lev...

Most apps for children violate your privacy

Do you know if apps with which children enjoy their safety? A team of researchers from the International Computer Science Institute (ICSI) of the University of Berkeley has studied compliance with the Online Privacy Protection Act (COPPA) in these mobile applications for the little ones, through a scalable dynamic analysis that allows the automatic evaluation of privacy behaviors of Android apps. After studying 5,855 applications aimed at children, the research concludes that most of these apps, 57%, violate the privacy of their users mainly due to the use of data by third parties. apps for children and privacy Although many apps offer options in their configuration to respect the federal law that protects minors in the United States, by disabling tracking, their results suggest that a majority of applications either do not use these options or propagate them in wrong way. In addition, researchers believe that 19% of apps for children send user IDs to third parties to show ...

Are social networks damaging democracy?

The revelations according to which Russian agents inserted ads on Facebook that tried to influence the 2016 US elections raise a disturbing question: is Facebook bad for democracy? As an expert in the social and political repercussions of technology, I think that the problem is not exclusively from Facebook, but that it is much broader: Social networks are weakening some of the conditions that have historically enabled the existence of national states democratic. I understand that it is a dramatic statement, and I do not expect anyone to believe it immediately, but considering that almost half of all potential voters received false news promoted by the Russians in Facebook is an argument that must be debated. Associate Professor of Philosophy, Director of Center for Professional and Applied Ethics, University of North Carolina-Charlotte How we create a shared reality Let's start with two concepts: the "imagined community" and the "bubble filter". ...

This is how visual challenges star in some of the most viral content

Constantly, we all receive in our mail, our WhatsApp or our Facebook account, games that try to test our ingenuity, imagination or visual skill.There are a thousand types, more fun or darker.But they have one thing in common: we cannot avoid trying them and see if we are able to solve them .This is how the visual challenges star in some of the most viral content of the network. Visual challenges, why are we crazy? The visual challenges are games.So, they attend to this playful and fun part that people have no choice but to feed from time to time.They are pure and hard entertainment, with no more pretensions, and that desire to Having fun represents one of the main features that are sought when surfing the Internet . Another of the qualities for which they succeed is because they challenge the mind directly.Human beings love that feeling of feeling a little troubled, somewhat lost, but convinced that there is a solution to that enigma to which, sooner or later, it will come.Rathe...