Sudbury Computer Repair Blog

RSS Grab RSS Feed

Enter your e-mail address below to receive
updates on new blog posts!

Microsoft Pays Hackers to Discover and Report Bugs in their Software

Joseph Coupal - Tuesday, July 02, 2013

It is important that Boston area company's computer system security is up-to-date. Your business computer system should be regularly and/or continuously monitored to make sure that you are up to date with the latest security, compliance, and disaster recovery standards.

Microsoft has long benefited from the bug bounty programs of other vendors. But it now has its own new programs to compensate researchers who spend their days hunting down fresh security flaws in Microsoft products. Microsoft is offering cash bounties to boost the "win-win" between Microsoft customers and security researchers.

Microsoft has reversed its longstanding ban on paying hackers for information about freshly discovered security holes and instead is now offering rich bounties for notice of new Windows bugs.

Microsoft has benefited from the bug bounty programs of Google and Mozilla. But it is now offering three new programs to encourage and compensate so-called gray hat and white hat researchers who spend their days hunting down fresh security flaws in Microsoft products.

Hackers can now claim bounties of up to $100,000, depending on the type of bug discovered. For instance, Microsoft will pay $11,000 hard cash for any bugs found in its upcoming Internet Explorer 11 browser software.

"Microsoft entering the game is a big changer because they are a large traditional software vendor," says Chris Wysopal, chief technology officer at application security vendor Veracode.  

Microsoft has come full circle in the hacking community's fractious "full disclosure" debate. Black hat, white hat and gray hat hackers have been relentlessly exposing new Windows bugs since the 1990s.

White hats argue that the intense scrutiny compels software vendors, like Microsoft, to take security more seriously and patch security flaws with more alacrity. Black hats hunt for bugs, too, but with criminal intent. Gray hats sometimes contribute to the cause of good, and at other times behave more like black hats.

Each newly disclosed Windows bug sets off a race to get the new vulnerability patched across the massive breadth of Windows PCs, laptops and servers -- before they can be taken advantage of.

That phenomenon now happens at such a frenzied scale that Microsoft has taken to issuing security patches on the first Tuesday of each month to maintain a semblance of order.

Bug bounty programs have been around for awhile in order to encourage gray hats and white hats to work with vendors to fix problems instead of disclosing new bugs without vendor coordination.

Bounties help "massively.” Cash is best when it comes to demonstrating that software companies who tend to rush products to market actually value the gray hat and white hat researchers who, essentially, perform a critical quality control function.

Now Microsoft is finally acknowledging gray hats and white hats -- with its check book. "The value comes from the business actually understanding the importance of security, and the downstream impacts and ramifications to their business and customers," Ford says.

Mike Reavey, director of Microsoft's Security Response Center, tells CyberTruth that in the past researchers willingly reported a vast majority of bugs directly to Redmond "so there wasn't a need to offer a bounty program."

Do you think you have a bug in your computer system? You may not be able to get cash for it, but contact Sudbury Computer to get rid of it and to help make your system more secure.

Recent Posts


Malware infections email virus, Boston Sudbury Computer Repair - Sudbury MA computer system security, Boston Calendar infected files multiple computer screen set up, Boston reliable email defense, Boston Netbook worms and spoofing, Boston IT services, Framingham data loss, framingham ransomware, Boston SPAMmers unsecure networks, Boston system backups, framingham network security, Boston cloud computing, marlborough RIM Micorsoft bugs, Boston Sudbury Malware cloud based solutions, Boston unsecure wireless networks, Boston viruses email worms, Boston data loss, marlborough Scareware SPAM IT services, Marlborough notebook infected websites data recovery, marlborough hosted email in the cloud, marlborough computer hard drive failure, marlborough Managed IT, Marlborough Virus issues secure wireless networks, Boston disaster recovery, Framingham anti-spyware protection multiple computer monitors, Boston SPAM filter computer hard drive failure, framingham Blackberry cloud based hosted email, Marlborough Netbooks antivirus infected email, Boston security for wireless networks, Boston email security options, Boston computer backups, marlborough computer and network security, Boston Sudbury Computer, Boston Desktops email has been hacked computer back ups, marlborough infected computer system, Boston computer security, Boston Laptop disaster recovery, Marlborough hosted email in the cloud, framingham computer hacker protection Boston hosted cloud email, framingham ultralight laptop computer system set up, Boston maintenance MA protect business network, Boston email security, Boston block infected email, Boston system backups, marlborough Enterprise Express Server business computer systems, Boston wireless security, Boston Managed IT, Framingham cloud computing, Framingham hacked email, Boston securing wireless networks, Boston Sudbury MA hardware issues Sudbury Computer, MA SPAM lists computer backups, framingham Exchange Environment cloud based hosted email, Framingham Facebook app/virus hosted cloud email, marlborough Sync Contacts SPAM protection, Boston Emails multiple computer screen, Boston virus scanner cloud based email security, Boston reliable email security, Boston malware, Boston Windows bugs, Boston email has been hacked, Boston computer screen set up, Boston data recovery, framingham Scareware cleaners Micorsoft security, Boston