DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Author Topic: Bug Bounty From MS  (Read 7,524 times)

Tinman57

  • Duck! It's another MicroSoft Patch!
  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,702
    • Military Service Badge - US Air Force
Bug Bounty From MS
« on: June 20, 2013, 12:42 AM »

Quote
Microsoft unleashes bug bounty program — for betas, too

The software giant's bug bounty program will aim to fix security flaws, bugs, and vulnerabilities even before products are released.

http://www.zdnet.com/microsoft-unleashes-bug-bounty-program-for-betas-too-7000016956
((((TINMAN))))

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,652
    • Cody Award
    • Participated in NANY Challenge Five Times
Re: Bug Bounty From MS
« Reply #1 on: June 20, 2013, 01:00 AM »
Do we send the bugg reports to MS or the NSA?

Tinman57

  • Duck! It's another MicroSoft Patch!
  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,702
    • Military Service Badge - US Air Force
Re: Bug Bounty From MS
« Reply #2 on: June 21, 2013, 12:43 AM »
Do we send the bugg reports to MS or the NSA?

  Don't matter who you send it to, the NSA will get a copy BEFORE the intended recipient does....
((((TINMAN))))

Tinman57

  • Duck! It's another MicroSoft Patch!
  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,702
    • Military Service Badge - US Air Force
Re: Bug Bounty From MS
« Reply #3 on: June 23, 2013, 01:37 AM »

  Well here's the "Gotcha" from MS.  Now whodathunkit?

Quote
Microsoft's $100,000 bug bounty: Read the fine print
06.22.2013 10:30 AM
Microsoft is offering up to $100,000 for vulnerabilities found in Windows 8.1 that are paired with exploits, but it's pretty much up to Microsoft to decide who gets paid how much based on a set of subjective criteria.

http://www.pcworld.com/article/2042728/microsofts-100-000-bug-bounty-read-the-fine-print.html
((((TINMAN))))

Fred Nerd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 278
    • Programming School - Stage 1 Medal
    • Participated in NANY Challenge Once
Re: Bug Bounty From MS
« Reply #4 on: June 24, 2013, 11:13 AM »
So basically they want you to keep all the bugs you find a secret so that you can be the only person claiming the bounty. This way no-one will put all the bugs up on the net to be laughed at.

Smooth move.

Tinman57

  • Duck! It's another MicroSoft Patch!
  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,702
    • Military Service Badge - US Air Force
Re: Bug Bounty From MS
« Reply #5 on: June 24, 2013, 07:29 PM »
So basically they want you to keep all the bugs you find a secret so that you can be the only person claiming the bounty. This way no-one will put all the bugs up on the net to be laughed at.

Smooth move.

  But the biggest issue is MS gets to decide how much the bug report is worth based on their "Subjective Criteria".  Of course to save themselves a lot of money, all they have to say is "Oh, this bug isn't that big of a deal or important enough to give you very much money....
((((TINMAN))))

Stoic Joker

  • Honorary Member
  • Joined in 2008
  • **
  • Posts: 6,652
    • Cody Award
    • Participated in NANY Challenge Five Times
Re: Bug Bounty From MS
« Reply #6 on: June 24, 2013, 08:59 PM »
If somebody dug up three bugs looking to get paid for them, and MS didn't have a decent going rate type price for the first one... I bet the other two would get offered to somebody else first.

Just sayin'... ;)

Tinman57

  • Duck! It's another MicroSoft Patch!
  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,702
    • Military Service Badge - US Air Force
Re: Bug Bounty From MS
« Reply #7 on: June 25, 2013, 12:18 AM »
If somebody dug up three bugs looking to get paid for them, and MS didn't have a decent going rate type price for the first one... I bet the other two would get offered to somebody else first.

Just sayin'... ;)

  I hear the Russian Mafia pays big bucks for bugs, especially for ones that allow back doors and such....  :P
((((TINMAN))))

Original address: https://www.donationcoder.com/forum/index.php?topic=35223.0