
Some time ago, Google announced the next stage of the competition, in which third-party developers receive a reward for bugs found in the Good Corporation Corporation. There is a rather large fund of $ 1 million. This has already been
written on Habré , so there’s no point in talking about everything in detail. Now the news is different - the fact is that there is already the first person who received the reward. The first prize was received by a Russian programmer, a student of Tyumen State University, whose name is Sergey Glazunov (by the way, is there no one on Habré?). The premium amount is 60 thousand dollars.
Note that the competition was launched quite recently, at the Pwn2Own event. By the way, the reward is different for different bugs. In the first case (the same 60 thousand dollars), the premium is allocated for detecting a vulnerability that allows you to get user account management in Chrome / Windows 7. The second bonus, in the amount of 40 thousand dollars, is allocated for the opportunity to use any “hole” in Chrome . And finally, there is still a bonus of 20 thousand dollars.
')
A supplement to the award is a chromabuk. As they say, a trifle, but nice. It is worth noting that after Glazunov discovered vulnerabilities, it was only a day before the “hole” was closed by the developers of the corporation. Glazunov himself, who received the award, can be said to specialize in detecting errors in the Chromium browser. For this, in addition to this award, he also received several payments in the amount of 60 thousand dollars (in total). In addition to Glazunov, payments received and developers from the company Vupen. The latter were able to find a “hole” in the so-called Chrome sandbox. The vulnerability allowed to bypass the sandbox protection.
As you can see, Google was not mistaken in proposing its program of cooperation with third-party developers. The latter receive money, the company - information about software errors, which are quickly eliminated. As a result, software from Google contains fewer errors than counterparts from competitors.
Via
cnet