Microsoft and Facebook will jointly pay for catching bugs

Microsoft and Facebook have launched a joint project in which users who discover bugs and vulnerabilities will be paid money. This was reported by The Verge .

The project, called HackerOne, will pay out rewards for finding bugs related to PHP, OpenSSL, Apache and basic Internet protocols. Depending on the specifics of the threat and the level of its danger, users will receive amounts from $300 to $5,000.

Volunteers from Facebook, Microsoft and Google will accept applications. They will monitor the correctness of bug reports, as well as the subsequent elimination of errors and malfunctions.

Although the three companies are competitors in many areas, they prefer to team up to solve problems that could potentially cripple key Internet infrastructure.

Even though we are fierce competitors, our security teams don't have to fight each other. Our competitors in this case are the bad guys from the outside. Alex Rice, Head of Product Safety at Facebook

Facebook and Microsoft separately already have their own bug bounty programs. However, at the end of August, the former were accused of ignoring error messages (the user had to write about this directly on Mark Zuckerberg’s wall), and the latter have so far paid only 128 thousand dollars, of which 100 thousand are for errors found in Windows 8.1.

#Microsoft #Facebook