Microsoft Widens Edge Browser Bug Hunt For Bounty Hunters (theregister.co.uk) 12
Microsoft said today it is expanding its program for rewarding those who find and report bugs in Edge, its latest web browser, enabling bounty hunters to claim their prize for a broader range of vulnerabilities. The Register adds: The snappily titled "Microsoft Edge Web Platform on Windows Insider Preview Bug Bounty Programme" was launched in August, and enabled anyone to report vulnerabilities they discover in Microsoft Edge in exchange for flippin' great wodges of cash. Now, the firm has expanded the programme, with a focus on vulnerabilities that lead to "violation of W3C standards that compromise privacy and integrity of important user data," or which enable remote code execution by a particular threat vector. Specifically, the bounty programme now covers the following: Same Origin Policy bypass vulnerabilities (such as universal cross-site scripting), Referrer Spoofing vulnerabilities, Remote Code Execution vulnerabilities in Microsoft Edge on Windows Insider Preview, and Vulnerabilities in open source sections of Chakra.
Re: (Score:2)
I.e.
No... Edge....
Finding bugs in Edge is like (Score:2)
Finding real bugs ... in a swamp .... in Florida .... or Alaska on the tundra marshes
what about render bugs? (Score:2)
It's easy enough to make a fast render engine, it's difficult to make a fast render engine with standards compliant rendering.
Re: (Score:2)
Well, the same can be pretty much said about both the webkit and gecko engines as well. I actually have more outstanding bugs in those engines than I do edge or IE, and they typically take a lot longer to get fixed than in IE/Edge. Sure, I might be an outlier, but that is my personal experience. I had one bug in firefox that has been outstanding for nearly 10 years, and every once in a while I see someone play with it, only to be kicked down the road further. webkit is pretty much the same, until years g
Obvious bug (Score:2)
(or feature) It only runs on Windows 10.
If you're pushing for world domination, get the Android port released.
Running anything (Score:2)