New Delhi: Google has launched a brand new bug bounty programme the place it is going to award up to $31,337 (almost Rs 25 lakh) to researchers who spot vulnerabilities within the firm’s Open Source initiatives.
Depending on the severity of the vulnerability and the venture’s significance, rewards will vary from $100 to $31,337. (Also Read:Â Unbelievable! Send e-mail with out web, this is the step-by-step information to entry Gmail offline)
The bigger quantities can even go to uncommon or significantly attention-grabbing vulnerabilities, “so creativity is encouraged,” mentioned Google whereas launching its Open Source Software Vulnerability Rewards Programme (OSS VRP). (Also Read:Â No RONA-DHONA, work 18 hours a day,’ CEO will get brutally trolled for a message to freshers)
As the maintainer of main initiatives reminiscent of Golang, Angular, and Fuchsia, Google is among the many largest contributors and customers of open supply on this planet.
Last 12 months, Google noticed a 650 per cent year-over-year improve in assaults concentrating on the open supply provide chain.
With the addition of Google’s personal vulnerability reward programme (VRP), researchers can now be rewarded for locating bugs that would probably influence your entire open supply ecosystem.
The unique VRP programme was one of many first on this planet and is now approaching its twelfth anniversary.
“Over time, our VRP lineup has expanded to include programmes focused on Chrome, Android, and other areas. Collectively, these programs have rewarded more than 13,000 submissions, totalling over $38 million paid,” Google mentioned in an announcement late on Tuesday.
Google mentioned its OSS VRP is a part of “our $10 billion commitment to improving cybersecurity, including securing the supply chain against these types of attacks for both Google’s users and open source consumers worldwide”.