7 ms·

Does reward 100000 mean 100k$ in bounty?

Ajedi32 9y ago
Yes. https://www.google.com/about/appsecurity/chrome-rewards/ https://www.google.com/about/appsecurity/chrome-rewards/ > We have a standing $100,000 reward for participants that can compromise a Chromebook or Chromebox with device persistence in guest mode
- euyyn 9y ago
  Searching by label shows only another instance of a bug that got paid that amount: https://bugs.chromium.org/p/chromium/issues/detail?id=648971&can=1&q=label%3Areward-100000&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified https://bugs.chromium.org/p/chromium/issues/detail?id=648971... It was actually reported by the same guy!
  - esturk 9y ago
    I wonder if s/he save a bunch of bugs to chain together a single big exploit. From the latest report, there was 6 bugs chained together. Imagine reporting 6 small bugs individually that nets you 6 x 1000$ = 6k$. But if you save each one, it may chain together for a potential 100k$ bounty. Of course, any insight that reveals these underlying relations is most certainly worth 100k$.
    - lomnakkus 9y ago
      AFAIUI (not a security researcher) that's actually how most of the most devastating security exploits work. There are obvious exceptions like HEARTBLEED, but in general escalation through multiple levels seems to be the name of the game.
      - rodjun 9y ago
        Or you can just get root from javascript, which that guy also did
    - jwilk 9y ago
      If they care about security, they shouldn't pay more for chaining, because that gives security researchers incentive to hoard vulnerabilities, rather than report them ASAP.
  - allenz 9y ago
    There is another persistent exploit, by GeoHot, that earned $150,000: https://bugs.chromium.org/p/chromium/issues/detail?id=351788 https://bugs.chromium.org/p/chromium/issues/detail?id=351788
delroth 9y ago
Yes: https://bugs.chromium.org/p/chromium/issues/detail?id=766253#c35 https://bugs.chromium.org/p/chromium/issues/detail?id=766253...
- jshap70 9y ago
  > i hope it's delivered via absurdly large check :D this would be awesome

Yes. https://www.google.com/about/appsecurity/chrome-rewards/ https://www.google.com/about/appsecurity/chrome-rewards/ > We have a standing $100,000 reward for participants that can compromise a Chromebook or Chromebox with device persistence in guest mode

euyyn 9y ago
Searching by label shows only another instance of a bug that got paid that amount: https://bugs.chromium.org/p/chromium/issues/detail?id=648971&can=1&q=label%3Areward-100000&colspec=ID%20Pri%20M%20Stars%20ReleaseBlock%20Component%20Status%20Owner%20Summary%20OS%20Modified https://bugs.chromium.org/p/chromium/issues/detail?id=648971... It was actually reported by the same guy!
- esturk 9y ago
  I wonder if s/he save a bunch of bugs to chain together a single big exploit. From the latest report, there was 6 bugs chained together. Imagine reporting 6 small bugs individually that nets you 6 x 1000$ = 6k$. But if you save each one, it may chain together for a potential 100k$ bounty. Of course, any insight that reveals these underlying relations is most certainly worth 100k$.
  - lomnakkus 9y ago
    AFAIUI (not a security researcher) that's actually how most of the most devastating security exploits work. There are obvious exceptions like HEARTBLEED, but in general escalation through multiple levels seems to be the name of the game.
    - rodjun 9y ago
      Or you can just get root from javascript, which that guy also did
  - jwilk 9y ago
    If they care about security, they shouldn't pay more for chaining, because that gives security researchers incentive to hoard vulnerabilities, rather than report them ASAP.
- allenz 9y ago
  There is another persistent exploit, by GeoHot, that earned $150,000: https://bugs.chromium.org/p/chromium/issues/detail?id=351788 https://bugs.chromium.org/p/chromium/issues/detail?id=351788

delroth 9y ago

Yes: https://bugs.chromium.org/p/chromium/issues/detail?id=766253#c35 https://bugs.chromium.org/p/chromium/issues/detail?id=766253...

jshap70 9y ago
> i hope it's delivered via absurdly large check :D this would be awesome