Need $100k? Microsoft will oblige if you can find Windows 8.1 preview exploits
Posted by: Jon on 06/20/2013 01:01 PM
[
Comments
]
If you have the skills, the knowledge, and the code chops to take Microsoft up on their offer, then you could be a $100k richer.
Microsoft asks that you step right up and help them protect their customers by taking part in the Security Bounty Program, which offers direct cash payments in exchange for reporting certain types of vulnerabilities and exploitation techniques. So come all friends, hackers, and researchers!
The announcement states that they will pay $100,000 in cash to anyone who discovers security exploits within the recent Windows 8.1 operating system, also up for grabs is a $50,000 bonus if you can offer defensive suggestions to block any such attack.
The following programs will launch on June 26, 2013:
Mitigation Bypass Bounty:
Microsoft will pay up to $100,000 USD for truly novel exploitation techniques against protections built into the latest version of our operating system (Windows 8.1 Preview). Learning about new exploitation techniques earlier helps Microsoft improve security by leaps, instead of capturing one vulnerability at a time as a traditional bug bounty alone would. TIMEFRAME: ONGOING
BlueHat Bonus for Defense:
Additionally, Microsoft will pay up to $50,000 USD for defensive ideas that accompany a qualifying Mitigation Bypass submission. Doing so highlights our continued support of defensive technologies and provides a way for the research community to help protect more than a billion computer systems worldwide. TIMEFRAME: ONGOING (in conjunction with the Mitigation Bypass Bounty).
Internet Explorer 11 Preview Bug Bounty:
Microsoft will pay up to $11,000 USD for critical vulnerabilities that affect Internet Explorer 11 Preview on the latest version of Windows (Windows 8.1 Preview). The entry period for this program will be the first 30 days of the Internet Explorer 11 beta period (June 26 to July 26, 2013). Learning about critical vulnerabilities in Internet Explorer as early as possible during the public preview will help Microsoft make the newest version of the browser more secure. TIMEFRAME: 30 DAYS
Microsoft asks that you step right up and help them protect their customers by taking part in the Security Bounty Program, which offers direct cash payments in exchange for reporting certain types of vulnerabilities and exploitation techniques. So come all friends, hackers, and researchers!The announcement states that they will pay $100,000 in cash to anyone who discovers security exploits within the recent Windows 8.1 operating system, also up for grabs is a $50,000 bonus if you can offer defensive suggestions to block any such attack.
The following programs will launch on June 26, 2013:
Mitigation Bypass Bounty:
Microsoft will pay up to $100,000 USD for truly novel exploitation techniques against protections built into the latest version of our operating system (Windows 8.1 Preview). Learning about new exploitation techniques earlier helps Microsoft improve security by leaps, instead of capturing one vulnerability at a time as a traditional bug bounty alone would. TIMEFRAME: ONGOING
BlueHat Bonus for Defense:
Additionally, Microsoft will pay up to $50,000 USD for defensive ideas that accompany a qualifying Mitigation Bypass submission. Doing so highlights our continued support of defensive technologies and provides a way for the research community to help protect more than a billion computer systems worldwide. TIMEFRAME: ONGOING (in conjunction with the Mitigation Bypass Bounty).
Internet Explorer 11 Preview Bug Bounty:
Microsoft will pay up to $11,000 USD for critical vulnerabilities that affect Internet Explorer 11 Preview on the latest version of Windows (Windows 8.1 Preview). The entry period for this program will be the first 30 days of the Internet Explorer 11 beta period (June 26 to July 26, 2013). Learning about critical vulnerabilities in Internet Explorer as early as possible during the public preview will help Microsoft make the newest version of the browser more secure. TIMEFRAME: 30 DAYS
Comments
