Japan's Largest Messaging App LINE Launches Public Bug Bounty Program on HackerOne

guest · Nov 15, 2019

LINE Launches Public Bug Bounty Program on HackerOne
November 15, 2019
https://www.securityweek.com/line-launches-public-bug-bounty-program-hackerone

Launched in 2011, LINE has grown to become one of the largest social platforms in the world, with hundreds of millions of users globally.

Following the launch of a private bug bounty program on HackerOne in July 2019, LINE is now inviting all of the platform’s contributing hackers to find security vulnerabilities in the LINE core messenger application and web domains.
Along with the launch of the new public program, the company revealed that it is transitioning its entire bug bounty ecosystem to the HackerOne platform.

“We are thrilled to be moving to the HackerOne platform as it allows us to increase our visibility and thereby increase the amount of high quality reports we receive as well. As being transparent about security issues is very important to us, we wanted a convenient way to disclose such information,” said Naohisa Ichihara, head of cyber security department at LINE.
Click to expand...

Beyonder · Nov 15, 2019

How does LINE compare to WhatsApp and other non-open source services? Does anyone know?

guest · Nov 28, 2019

‘It’s a win-win’ – Line security engineer discusses bug bounty program launch
Asian market moving tentatively towards a more open approach to security
November 28, 2019
https://portswigger.net/daily-swig/...-engineer-discusses-bug-bounty-program-launch

Robin Lunde, a security engineer at Line, told The Daily Swig why it was time for a step change in the messaging giant’s security strategy.

We want bugs to be shared with us rather than exploited in the wild or sold/shared, and we want to reward people for finding them. With every bug, our internal security improves as well, so it’s a win-win situation for both the reporters and us.
While it may still take some time before it becomes common, the Asian market is gradually moving towards a more open approach to security, where issues are not hidden, but shared and improved.

Our internal team cannot catch [every vulnerability before release, so] we consider bug bounty an additional [security] layer.
Click to expand...

BoerenkoolMetWorst · Nov 29, 2019

Beyonder said: ↑

How does LINE compare to WhatsApp and other non-open source services? Does anyone know?
Click to expand...

I don't use it myself but found this:
https://citizenlab.ca/2017/08/linesecurity/

Log in or Sign up

Japan's Largest Messaging App LINE Launches Public Bug Bounty Program on HackerOne

guest Guest

Beyonder Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

Log in or Sign up

Japan's Largest Messaging App LINE Launches Public Bug Bounty Program on HackerOne

guest Guest

Beyonder Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

Useful Searches