Home »
 » Google Will Pay You $200,000 For Finding a Bug in Android OS
 
 Google to pay $200,000 for finding bug in android so if you are a hacker or a security researcher, that is probably going to be a good news for you. Google Will now Pay you Up to $200,000 if you Find any Bug in it’s Android OS. A few days ago, a malware called "Judy"
 hit over 36.5 million Android-based phones and caused a lot of damage. 
So, Google has decided to increase the bounty for finding a bug in 
Android OS to as much as $2,00,000.
According to cyber security firm Check Point, dozens of malicious 
apps were downloaded between 4.5 million to 18.5 million times from the 
Play Store. It was noted that the malicious code was present hidden in 
some apps since April 2016, undetected by Google. Google has now removed
 the infected apps from the PlayStore. “Judy” is one such case of how an
 open and free mobile operating system (OS) can be exploited by 
malicious app developers.
According to cyber security firm Check Point, dozens of malicious apps 
were downloaded between 4.5 million to 18.5 million times from the Play 
Store. Some of the malware-affected apps have been discovered residing 
on the online store for several years. “Judy” is one such case of how an
 open and free mobile operating system (OS) can be exploited by 
malicious app developers. 
Most security flaws we hear about now affect old builds of the OS or 
require clever social engineering to get the user to weaken device 
security, technology website extremetech.com reported on Friday. The 
versions of Android being released now are more secure than what Google 
was putting out years ago and as a result no one has managed to claim 
Google’s largest bug bounties for Android.
Hoping to attract more researchers and engineers to the bug bounty 
programme, the company has increased the rewards to up to 
$2,00,000.Google started the bug bounty programme for Android about two 
years ago in which the security researchers, who demonstrate an exploit,
 get a cash prize — the amount of which varies based on the severity of 
the hack.
Tech companies such as Apple, Facebook, Microsoft, and Google have 
paid out millions of dollars in bug bounty programs over the past few 
years. Google started the bug bounty program for Android about two years
 ago in which the security researchers, who demonstrate an exploit, get a
 cash prize — the amount of which varies based on the severity of the 
hack. Since then the reward value has been increased from $50,000 to up 
to $200,000.
 The increased reward applies to two bounties: one for vulnerabilities
 in TrustZone or Verified Boots, and the other for a remote Linux kernel
 exploit. Among them, TrustZone or Verified Boot is a matter of serious 
concern than the Linux exploit, as reported by Extreme Tech. TruztZone 
is chipset related technology, which ensures biometric data, DRM and 
boot settings are kept in a trusted secure environment. On the other 
Verified Boot is software related, to ensure the OS has not tampered 
with each time a device starts up. Google has increased the bounty for 
both TrustZone and Verified Boot from $50,000 to $200,000.
It is speculated that Google will further increase the reward price if 
it again fails to get to a working exploit for Android’s core 
components.
 
 
 
 
 
0 comments:
Post a Comment