Google contributes $2 million prize fund to Pwnium contest
updated 02:50 pm EDT, Thu August 16, 2012
Security contest in Malaysia rewards browser bugs, exploits
Google is putting $2 million up for grabs if hackers can exploit the Chrome web browser. The Pwnium 2 contest, to be held on October 10 at the 10th anniversary Hack In The Box security conference in Kuala Lumpur, Malaysia, following two successful hacks being demonstrated at the CanSecWest conference earlier this year. The $2 million is divided down into four prize levels.
Hacks using bugs within Chrome and not relying on other system flaws can earn the finder $60,000. A prize of $50,000 will go to those showing a "Partial Chrome Exploit", where at least one bug in Chrome is used in tandem with other systems, such as a WebKit bug combined with a Windows kernel bug. "Non-Chrome exploits" will also earn $40,000 for anything that doesn't use any bugs within Chrome, for example in Flash or Windows. A fourth level for "Incomplete Exploits" sees a panel rewarding attempts that either partly work or are unreliable.
Google has a history of rewarding those finding bugs in their products. An update to their Vulnerability Rewards Program in April allowed people to earn up to $20,000 per vulnerability declared, with smaller values such as $3,133.70 and $1,337 for lesser exploits such as cross-site scripting. [via Chromium Blog]
