Yahoo Bug Bounty Program is Now Live

[michiel3]

http://yahoodevelopers.tumblr.com/post/65622522325/the-bug-bounty-program-is-now-live

[tuananh]

Not long ago, there was a submission about a bug reporter didn't get any kind of reward (except a coupon) for reporting a bug for Yahoo!

Kudos to Yahoo! for listening to community's feedback.

[michiel3 → tuananh]

Relevant blog post by Yahoo! from earlier this month:

http://yahoodevelopers.tumblr.com/post/62953984019/so-im-the...

[alanbyrne]

Shame that Microsoft still have such a terrible bug bounty programme.

http://www.microsoft.com/security/msrc/report/bountyprograms...

[jfren]

"we promised to that our program will would address the following areas:"?!

[ck2]

A big yahoo bug is you cannot register an account without giving them a mobile phone number.

I don't own a mobile phone with a phone number.

Very strange way to register people.

[fourstar → ck2]

Please email marissamayer@tumblr.com to claim your $15,000.

[smoyer]

But I wanted the tee-shirt! (we're never happy)

[chriskelley → smoyer]

The rewards bullet point says you can still get a shirt if you want. Hope is not lost!

[devx]

Someone you should tell them about the mother of all security bugs: NSA has full access to their datacenters.

They might want to fix that one first, before caring about the tiny little ones. It doesn't look like they are in a hurry to fix that one yet, though:

http://www.washingtonpost.com/blogs/the-switch/wp/2013/10/30...