Microsoft will not pursue guide of Mozilla and Google in paying researchers for reporting vulnerabilities, a corporation executive said.
"We don't believe are finest way for us to recompense researchers," said Mike Reavey, director of Microsoft Security Research Center (MSRC) in an interview. Reavey was reacting to questions regarding current steps by Google and Mozilla to increase payments made to external researchers who report faults, and whether Microsoft will pursue suit.
Last week, Mozilla hiked Firefox bounties for bugs rated "critical" and "high" to $3,000. Some days afterward, Google matched Mozilla's elevate by growing peak-dollar payment to $3,133 for reported Chrome faults. But Microsoft won't dive into similar pool.
"Not all researchers are monetarily aggravated," Reavey said a quarrel that flies in face of what a few of famous researchers say, plus beside speck of security vendors that maintain profits motivate most hackers who technique and release attacks.
Reavey as well said that Microsoft recompense security researchers in another ways.
He ticked off the security conferences Microsoft funds or co-sponsors it's one of seven apex sponsors of next week's Black Hat conference, for instance its Blue Hat assembly on its Redmond, Wash. campus, and employment chances for researchers as freelancer and members of its security team.



Reply With Quote
Copyright Techfuels
Bookmarks