Уровень 0 · материалов: 3
В кластер входят документы о получении или попытке получения вознаграждений за поиск уязвимостей в программном обеспечении молодыми людьми, и не входят документы о профессиональном аудите безопасности или общих принципах кибербезопасности.
Общие признаки: программы bug bounty, поиск уязвимостей в ПО, молодые исследователи безопасности, денежные выплаты за отчеты об ошибках
Группа выше: Bug bounty и раскрытие уязвимостей
Смысл: A 12-year-old boy named Alex Miller earned a $3,000 reward from Mozilla for finding a memory vulnerability in Firefox, demonstrating the impact of bug bounty programs on young security researchers.
A 12-year-old boy earned $3,000 from Mozilla after discovering a memory vulnerability in the Firefox browser.
Смысл: The text reports on Sergey Glazunov, a Russian student who won a $60,000 bounty from Google for finding a Chrome vulnerability, illustrating the success of Google's bug bounty program in enhancing software security.
Russian student Sergey Glazunov received $60,000 from Google for discovering a critical vulnerability in Chrome that allowed account takeover.
Смысл: The main idea is that PayPal's rigid age restriction for its bug bounty program led a talented 17-year-old researcher to publicly disclose a security vulnerability (XSS) instead of reporting it privately, demonstrating the risk of alienating young security researchers.
A 17-year-old German student publicly leaked a PayPal XSS vulnerability after being denied a bug bounty reward due to his age.