Grim warning for bounty hunters – Yahoo pays out paltry $12.50 per vulnerability

Discussion in 'other security issues & news' started by SweX, Oct 2, 2013.

Thread Status:
Not open for further replies.
  1. SweX

    SweX Registered Member

    Joined:
    Apr 21, 2007
    Posts:
    6,429
    http://www.welivesecurity.com/2013/...ahoo-pays-out-paltry-12-50-per-vulnerability/
     
    SweX, Oct 2, 2013
    #1
  2. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,738
    More like grim warning for Yahoo's security. Bounty hunters have plenty of superior alternatives.
     
    J_L, Oct 2, 2013
    #2
  3. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    Yahoo Offers $12.50 as Bug Bounty
    http://www.infosecurity-magazine.com/view/34812/yahoo-offers-1250-as-bug-bounty-/
     
    siljaline, Oct 2, 2013
    #3
  4. Techwiz

    Techwiz Registered Member

    Joined:
    Jan 5, 2012
    Posts:
    541
    Location:
    United States
    "There were two men walking across the Steppes when they stumbled across a lion that had not fed for some time. For the lion, diner had just come knocking. The two men ran for their lives. The slower of the two noticed that the other man was not running at full speed, but kept one step in front and appeared rather undisturbed by the ordeal of being chased by a hungry lion.

    "What are you doing?" he asked his partner.

    "I am fast," the other partner said, "but not faster than the lion. Still, I don't need to be faster than the lion, only faster than you, my friend."

    My instructor shared this story as a metaphor for how companies approach security. Naturally, I put back by the fact companies would put in the bare minimum to just stay ahead of competition. But this article takes the cake. I guess the only question left is, "Do you Yahoo?". Time to shop around for another provider.
     
    Techwiz, Oct 2, 2013
    #4
  5. safeguy

    safeguy Registered Member

    Joined:
    Jun 14, 2010
    Posts:
    1,795
    $12.50 is decent for a meal or 2. You might even catch a movie with that. I'm not convinced though that bounty hunters would consider that a valuable reward...

    Now that's bollocks.
     
    safeguy, Oct 2, 2013
    #5
  6. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,074
    Location:
    Texas
    http://thenextweb.com/us/2013/10/03...reporting-policy-with-rewards-of-up-to-15000/
     
    ronjor, Oct 3, 2013
    #6
  7. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    siljaline, Oct 3, 2013
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...