by Stephen Shankland
If there's a competition to uncover security holes in Google's browser, Sergey Glazunov is winning it.
Yesterday Google awarded him $3,133.70 ("eleet") for finding a critical vulnerability that Google patched with a new release of Chrome yesterday.
It's the first time Google paid out this top bounty, but not the first time it's paid Glazunov. He's also been paid $1,337 four times for the "leet" level of vulnerabilities, eleven times for the $1,000-level, and once at the $500 level.
The critical vulnerability relates to a "stale pointer in speech handling," Google said, but hasn't published further details. Critical vulnerabilities let an attacker run arbitrary software on a person's computer just by visiting a Web site.
Google issues Chrome updates automatically, so restarting the browser installs the new version.
No comments:
Post a Comment