OnePlus launches a bug bounty program with rewards of up to $7,000
0Reported today on TechSpot
For the full article visit: https://www.techspot.com/news/83276-oneplus-launches-bug-bounty-program-rewards-up-7000.html
OnePlus launches a bug bounty program with rewards of up to $7,000
The company is also partnering with HackerOne to let security researchers test OnePlus' systems for vulnerabilities
In context: OnePlus has had two data breaches in its six-year history, the most recent of which was followed by a commitment from the company to strengthen the security of its ecosystem with the launch of a bug bounty program.
The OnePlus Security Response Center is the company's new bug bounty program in the wake of data breaches, one which happened last year affecting credit card customers and a second, more recent occurrence in November that exposed personal details of some users.
"We welcome independent security researchers of all backgrounds and levels to join us in our efforts to secure the OnePlus ecosystem." notes the program's announcement page. Researchers who've found a security vulnerability or a bug in OnePlus' systems need to sign up for an account and can submit their findings here.
Based on a vulnerability's "severity and actual business impact," OnePlus has created the following five reward tiers:
Special cases: up to $7,000
Critical: $750–$1,500
High: $250–$750
Medium: $100–$250
Low: $50–$100
Researchers can look for security issues and loopholes in OnePlus-owned components such as the company's official website, OnePlus Store, Oxygen OS, OnePlus App Store, OnePlus Cloud, OnePlus Communities and Accounts.
The program also mentions certain practices that researchers should refrain from, like attempting DDoS attacks, spamming, social engineering OnePlus' staff and physically damaging the company's property. There are also several techniques and exploits on the announcement page that count as 'In