Google is desperate for you to find exploits in Chrome, so much so
that they are willing to pay out a million dollars in total prizes to
the people who do. Google will have up to three winners, paid out on a
first come, first served basis. For a full Chrome exploit, you will net a
cool sixty thousand dollars. If you find a partial exploit, Google will
throw you forty thousand, and they will throw twenty thousand if you
find an exploit that could cause problems for Chrome users, but is not a
Chrome specific problem. As an added bonus, successful winners will
receive a free Chromebook.
This is all part of the CanSecWest security conference and the
Pwn2Own contest, where Chrome has been the only browser never to be
successfully brought down. Google is begging for it, and upping the
payout should really help motivate people to try hard to break in.
In a way, Google is happy that their browser offers top security. Chris Evans and Justin Schuh said, “While
we’re proud of Chrome’s leading track record in past competitions, the
fact is that not receiving exploits means that it’s harder to learn and
improve.” They went on to say, “To maximize our chances of
receiving exploits this year, we’ve upped the ante. We will directly
sponsor up to $1 million worth of rewards.”
Under the terms of the offer, the web software giant will pay 60,000
dollars for any "full Chrome exploit" that allows malicious hackers to
take over a users’ computer via a bug solely in the company’s web
browser. The hackers must make available the full details of the exploit
to Google in order to qualify for the prize, and must not have released
details of the exploit to anyone else, the Google Chrome security team
announced in a late Monday blog posting.
In addition, Google will pay 40,000 dollars to anyone whose new exploit
relies on a bug in Chrome in conjunction with a flaw in Windows 7, and
will offer 20,000 to those who uncover a previously unknown bug in
Windows 7. It will pay these sums for every new exploit it receives
until the 1 million dollar limit is reached.
No comments:
Post a Comment