Hackers made a fortune from Google security vulnerability, Google paid $ 6.5 million in prize money to security researchers

As part of the vulnerability reward program, Google paid in 2019 to the Security researchers more than $ 6.5 million, of which the biggest reward to $ 201,000.

Google revealed a total of 461 researchers in a blog post, the researchers reported security issues in Google vulnerability bounty program, and a summary of its 2019 bounty.

"As our researchers, for us, 2019 is a record year! We paid more than $ 6.5 million bonus, double bonus we paid within one year. At the same time, our researchers decided this year donations to charity $ 500,000, a record high. this is five times the contributions of our past year. "Google researchers explained he said.

Increase reward

As part of the incentive program, Google paid in 2018 to the Security researchers $ 3.4 million, compared to $ 2.9 million the previous year has increased. This means that the amount paid by the company almost doubled this year, 2020 will grow again.

One of Vulnerability Reward Program was implemented last year in the biggest change to Android-related, because the search company can now pay no less than $ 1 million, to get a complete remote code execution vulnerability persistent, and Titan M affect the security element on the Pixel.

"Android Security award covers the code running on eligible devices bug, and Google's other reward programs are not covered by the bug. Qualified bug include AOSP codes, OEM Code (libraries and drivers), the kernel, security element code and TrustZone operating system and module bug. vulnerability other non-Android code, such as running in the chipset firmware code, if they affect the safety of the Android operating system, may be acceptable, "Google explains.

About Android Safety Award Scheme details can be found here.

Guess you like

Origin www.linuxidc.com/Linux/2020-01/162164.htm