Mozilla Firefox Raises Reward For Bug Reports

Over the past five years, Mozilla has $ 1.6 million paid to hackers and researchers who discovered bugs and vulnerabilities in Firefox and reported, but according to the open source developer's time for change.When Mozilla five years ago with the program began, a maximum reward of $ 3,000 paid for critical vulnerabilities. That amount has now increased to $ 7,500.

In addition, Mozilla also uses variable remuneration, depending on the quality of the message, the severity of the leak and the simplicity with which the vulnerability to attack. For this category of special vulnerabilities or attack techniques, researchers can get more than $ 10,000. Furthermore Mozilla also vulnerabilities as "moderate" may be considered also qualify for a reward, something that previously was not the case.

These vulnerabilities deliver between 500 and 2,000 dollars on. Besides cash researchers will also be rewarded with eternal fame as a Mozilla Firefox Security Bug Bounty Hall of Fame was launched where all the researchers who find bugs listed.The reward program applies to Mozilla Firefox, Thunderbird, Firefox for Android and FirefoxOS.

Drupal Praises To $ 1,000 For Bugs In Drupal 8

The creators of the popular content management system (CMS) Drupal is a temporary program started with hackers and researchers who find vulnerabilities in Drupal 8 and reporting are rewarded financially.The final version of Drupal 8 is coming and contains major changes to the architecture. To ensure that any security issues and vulnerabilities are found in time the developers on the platform of Bugcrowd launched a so-called "bug bounty" program.

Until August 31 this year to vulnerabilities in Drupal 8, such as cross-site scripting, SQL injection and cross-site request forgery, to be reported. Depending on the impact of the bug guard a reward of between 50 and 1,000 dollars. The rewards are only for Drupal 8 and run until August 31, although the program can be extendable. The program was started last Wednesday, and there are no bug reports received yet until now.

Tesla Motors Will Pay For Bug Reports On Website

Carmaker Tesla Motors is a reward program launched in which the hackers and researchers are rewarded for reporting bugs in the website. Vulnerabilities may only be in the domain teslamotors.com and underlying subdomains sought, except the shop feedback page and page for investors. The program, through Bugcrowd hosted, focuses on Tesla's website.

The rewards range from 25 to 1,000 dollars. The reporting of cross-site scripting can yield 200 to $ 500, while command injection, SQL injection and increasing duties with $ 1,000 reward. At present, there were already 22 bugs are offered. The reward program Tesla was already a year in the planning and was the past few weeks in "private mode", reports 'The Kos' on Twitter .

In April, the website and the Twitter account of the carmaker hijacked . Later an attacker via social engineering had changed the IP address of the website. The attack took place outside Tesla and was directed against domain registrar Network Solutions.