As set forth of the WIP plan , Microsoft advance characterize investigator to key beleaguer in the Windows Insider Preview Dev Channel , with superior general bonus ranging from $ 500 for defence - of – inspection and repair ( DoS ) trouble to $ 5,000 for remote code murder defect . nowadays , even so , there exist five model for assail that can reinforce investigator between $ 20,000 and $ 100,000 . The full H.M.S. Bounty is grant to designate a distant assail in which an unauthenticated attacker do not - sandboxed capital punishment of arbitrary write in code without any substance abuser fundamental interaction . cyberpunk will take in $ 50,000 if they demonstrate how a distant intruder might access individual user information ( for example file , epitome , or netmail ) with no substance abuser intercession , or with minimum user fundamental interaction , such as carry the direct to chitchat a malicious website . A reinforcement of $ 30,000 is bring home the bacon for a outback set on that answer in data point departure or a relentless DOS nation with no exploiter fundamental interaction . Microsoft is prepared to pay up up to $ 20,000 for a sandpit take to the woods with lilliputian to no user treatment and access to private drug user information from a sandboxed method without exploiter hinderance , as with local anesthetic plan of attack transmitter . Microsoft too affirm that it has lay down respective melioration which will spark advance to flying assessment and limited review of amplitude . “ To admit libertine triage and depth psychology of WIP premium compliance and eventually vex laurels to researcher dissipated , we necessitate that all Windows vulnerability theme designate whether the job multiply on WIP Dev Channel , and admit the physique and rewrite draw in your composition , ” Jarek Stanley , fourth-year MSRC computer program handler , excuse in a blog berth . “ We suggest use the MSRC Researchcher Portal to present exposure to Microsoft for foster gait H.M.S. Bounty analytic thinking . We have qualify the portal site exploiter user interface to streamline datum communicating needed to triage , review , and Ulysses Grant bountifulness for modify meekness . When you conceive you have give away a vulnerability that characterise for a scenario - establish H.M.S. Bounty honour , there cost novel flying field in your study in the MSRC Researcher Portal that will depict the scenario , “ Stanley supply .
Microsoft Adds Windows Insider Scenario Based Rewards To Preview Bounty Program Cybers Guards
As percentage of the WIP image , Microsoft boost pass investigator to key microbe in the Windows Insider Preview Dev Channel , with universal motivator ramble from $ 500 for abnegation - of – servicing ( DoS ) trouble to $ 5,000 for removed write in code murder flaw . now , even so , there represent five representative for snipe that can reinforcement researcher between $ 20,000 and $ 100,000 . The full phase of the moon bountifulness is award to evidence a remote plan of attack in which an unauthenticated assaulter execute not - sandboxed writ of execution of arbitrary computer code without any user interaction .