GitHub widens the scope of its bug bounty program and increases rewards

Now in its fifth year, the GitHub Security Bug Bounty has been updated to offer larger rewards to those who find bugs. At the same time, the scope of the program is being expanded and protections for researchers have been added through new Legal Safe Harbor terms. As well as expanding the program to cover any of its 'first-party services', GitHub has effectively removed any upper limit on the size of reward pay-outs for critical bugs. See also: Microsoft now lets everyone create unlimited private GitHub repositories for free Apple apologizes for privacy-invading FaceTime bug, promises delayed software update Europe… [Continue Reading]