Yahoo relents on bug program
Posted by: Timothy Weaver on 10/03/2013 03:47 PM
[
Comments
]
After being ridiculed for handing just $US12.50 to researchers who found a nasty bug, Yahoo! has quickly changed its bug bounty program.
Yahoo, in a blog post, is now offering decent rewards for bug hunters. The author of the post is one Ramses Martinez.
Apparently Yahoo was flooded with angry emails full of disdainful outbursts at its bug program.
Martinez explains the new reward program as:
“Yahoo will now reward individuals and firms that identify what we classify as new, unique and/or high risk issues between $150 - $15,000. The amount will be determined by a clear system based on a set of defined elements that capture the severity of the issue.”
The new policy is promised to begin by the end of October, but will be backdated to July 1st. People who found nasty bugs after the latter date will be paid under the new scheme.
Apparently Yahoo was flooded with angry emails full of disdainful outbursts at its bug program.
Martinez explains the new reward program as:
“Yahoo will now reward individuals and firms that identify what we classify as new, unique and/or high risk issues between $150 - $15,000. The amount will be determined by a clear system based on a set of defined elements that capture the severity of the issue.”
The new policy is promised to begin by the end of October, but will be backdated to July 1st. People who found nasty bugs after the latter date will be paid under the new scheme.
Comments