Now ChromeOS is participating in the rewards program for bugs found.
Apparently, the reward project for errors found by third-party developers in Google software (previously the project worked only with Google Chrome) can be considered successful. In any case, that’s what he is considered to be in the “Corporation of Good”, and they are going to transfer the gained experience to other products of the company. At the moment, the second "participant" of this project will be ChromeOS. For found bugs in this OS, developers from outside will be able to receive rewards.
It is worth noting that during the work of the program, the corporation paid 729 thousand dollars for 1,100 error messages. This is very, very much, agree. But the money spent pays off with interest, since the liquidated errors could lead to far greater losses, even if not financial, then to a loss of reputation. And this is just what no modern company can not allow.
These 1100 bugs were found not by a thousand people, but by about 200 participants, which you will agree, a little for the army of developers that exists now. According to statistics, about half of the total amount spent on rewards for found bugs, left to individuals. The remaining funds were received by small and large companies that also participated in the “find a bug in our software” project.
')
The decision to include ChromeOS in this program was made not so long ago. The stimulus for making a positive decision was the message of several independent developers at once who reported serious vulnerabilities found in the software. Vulnerabilities relate, among other things, to the OS kernel from Google. Naturally, there may be other bugs that Google wants to eliminate as soon as possible in the shortest possible time.
By the way, the program “money for bugs” was launched in 2010 - it was one of the first cases when a software developer agreed to pay for errors found in his own products. In July, Facebook has already launched its own similar program. Well, Microsoft, Apple and Oracle are still refusing to pay money to third-party developers who find bugs (and sometimes quite significant ones) in the software of these companies.
Via arstechnica
It is worth noting that during the work of the program, the corporation paid 729 thousand dollars for 1,100 error messages. This is very, very much, agree. But the money spent pays off with interest, since the liquidated errors could lead to far greater losses, even if not financial, then to a loss of reputation. And this is just what no modern company can not allow.
These 1100 bugs were found not by a thousand people, but by about 200 participants, which you will agree, a little for the army of developers that exists now. According to statistics, about half of the total amount spent on rewards for found bugs, left to individuals. The remaining funds were received by small and large companies that also participated in the “find a bug in our software” project.
')
The decision to include ChromeOS in this program was made not so long ago. The stimulus for making a positive decision was the message of several independent developers at once who reported serious vulnerabilities found in the software. Vulnerabilities relate, among other things, to the OS kernel from Google. Naturally, there may be other bugs that Google wants to eliminate as soon as possible in the shortest possible time.
By the way, the program “money for bugs” was launched in 2010 - it was one of the first cases when a software developer agreed to pay for errors found in his own products. In July, Facebook has already launched its own similar program. Well, Microsoft, Apple and Oracle are still refusing to pay money to third-party developers who find bugs (and sometimes quite significant ones) in the software of these companies.
Via arstechnica
Source: https://habr.com/ru/post/137950/
All Articles