Microsoft pays you $250,000 to find bugs in its programs

Radu Tyrsina By: Radu Tyrsina
2 minute read

Home » News » Microsoft pays you $250,000 to find bugs in its programs

It’s a well known thing that Windows has countless security problems. Even here, at WindowsReport, we write almost weekly about various KB bugs and other vulnerabilities.

Microsoft is now basically acknowledging this by launching a new bug bounty program, rewarding anyone who finds Meltdown, Spectre or other similar vulnerabilities. Microsoft also refers to these as as speculative execution side channel vulnerabilities,.

You could make up to $250,000 by squashing security bugs

Microsoft is paying  from $5,000 up to $250,000 depending on the severity of the vulnerability. Find below the criteria that you need to meet when discovering new vulnerabilities:

  • A novel category or exploit method for a Speculative Execution Side Channel vulnerability.
  • A novel method of bypassing a mitigation imposed by a hypervisor, host or guest using a Speculative Execution Side Channel attack. For example, this could include a technique that can read sensitive memory from another guest.
  • A novel method of bypassing a mitigation imposed by Windows using a Speculative Execution Side Channel attack. For example, this could include a technique that can read sensitive memory from the kernel or another process.
  • A novel method of bypassing a mitigation imposed by the Microsoft Edge using a Speculative Execution Side Channel attack. For example, this could include a technique that can read sensitive memory from the Microsoft Edge content.

You have time until the end of 2018. Microsoft said the following:

“Microsoft is announcing the launch of a limited-time bounty program for speculative execution side channel vulnerabilities. This new class of vulnerabilities was disclosed in January 2018 and represented a major advancement in the research in this field. In recognition of that threat environment change, we are launching a bounty program to encourage research into the new class of vulnerability and the mitigations Microsoft has put in place to help mitigate this class of issues.”

Speaking of security breaches, Intel recommends you shouldn’t install Spectre and Meltdown patches until everything is fixed. And if you’re worried, you could download this tool to see if your computer is vulnerable to these threats.

Discussions

Next up

How to fix error 0x80070643 after installing KB4023057

Madeleine Dean By: Madeleine Dean
Less than a 1 minute read

If you go to Windows Update and check for updates, you’ll see there’s an interesting update waiting to be installed. Update KB4023057 is an old […]

Continue Reading

Windows 7 apps should work fine after Windows 10 upgrade

Matthew Adams By: Matthew Adams
2 minute read

Microsoft will stop supporting Windows 7 at the beginning of 2020. Then the software giant will stop releasing patch updates for Win 7. As such, […]

Continue Reading

What are the best tools to convert DVDs to MP4 files?

Vladimir Popescu avatar. By: Vladimir Popescu
Less than a 1 minute read

In the past, if you wanted to watch a movie at home, you had to use a clunky DVD player and the TV you had […]

Continue Reading