“VeriSign’s iDefense Labs has placed an $8,000 bounty on remote code execution holes in Windows Vista and Internet Explorer 7. As part of its its controversial pay-for-flaw VCP (Vulnerability Contributor Program), iDefense said it will pay the reward for each submitted vulnerability that allows an attacker to remotely exploit and execute arbitrary code on either of the two Microsoft products. In addition to the $8,000 award for the flaw, iDefense will pay between $2,000 and $4,000 for working exploit code that exploits the submitted vulnerability.”Here is some more Tech News from around the web:
- Apple bug-fix tool is buggie @ The Inquirer
- Intel countersues Transmeta citing ‘doctrine of unclean hands’ @ The Inquirer
- Cisco sues Apple over iPhone trademark @ Ars Technica
- Vista vs. Security Vendors: The Saga Continues – Part 1 @ OSWeekly
- Ubuntu Goes Low Spec! @ OSWeekly
- iPod Users Spend $100 On iPod Accessories @ CoolTechZone
- Symantec Not Threatened By Microsoft @ CoolTechZone
- An Apple That Could @ PC Mechanic
- Google Docs and Spreadsheets @ PC Mechanic
- Tech Predictions for 2007 @ Digital Trends
- Make Your Web Site Accessible @ PC Mechanic
- Track IR review @ DH
- New tool enables sophisticated phishing scams @ CNET
IE7 and Vista flaws Wanted: Dead or Alive
VeriSign offers you the chance to become a bounty hunter. They are offering $8,000 per hole reported, in response to Trend Micro researchers finding Vista flaws for sale at $50,000 per on black hat sites. Make sure you are fast, for VeriSign will only pay out for the first 6 people to report a particular flaw.
