Click here to preview the new Fast Company

Want to try out the new

If you’d like to return to the previous design, click the yellow button on the lower left corner.

Facebook, Google, And Microsoft Pay To Go Bug Hunting With Friends

Three of the biggest Net names are offering a reward for bug hunters.

Bug bounty-hunter reward program Hackerone offers the usual cash fees for hackers who can successfully point out a bug, but it comes from an unlikely source: a coalition of rival companies Microsoft, Facebook, and Google.

All three firms fund the rewards, which range from $300 to $5,000, depending on the "size" of the security hole the hackers find. The actual amounts will be determined by a panel of employees from all three companies and may actually be higher than the $5,000 limit if the security breach discovered is meaningful enough. Anyone, anywhere (except for U.S. trade-restricted nations like Iran), even children are welcome to enter the hunt, which Hackerone suggests could cover bugs in web infrastructure technologies as well as other software.

The companies also run their own bug-spotting programs. Microsoft recently revealed a serious bug affecting its Office software (it has been patched) and paid $100,000 to a British hacker who found a bug in Windows 8.1. Google, meanwhile, has expanded its own bug reward program to cover open-source software.

[Image: Flickr user John Tann]

Add New Comment


  • King Of Hate

    I know how to find bugs. You log into gmail and click on view page source. Then you scroll down to the line (989) that says:pass_reset_code (2834673). Then you add this in on the end on the url and you can change the password without even knowing the original one. This works great when someone else is logged in. If they get up for 10 sec you just view page source and copy. Hopefully they wont use copy/paste. Once they are done you just paste it into word, find the reset code and change their password.

    Please make check payable to the Hackers Are Worthless Fags Foundation