Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
The European Union believes it has a simple way to bolster its digital security: offer lots of cold, hard cash. The European Commission is launching bug bounties in January that will offer prizes in return for spotting security flaws in 14 free, open source software tools EU institutions use. . These include well-known tools like VLC Media Player, KeePass, 7-zip and Drupal as well as something as vital as the GNU C Library. The bounties range from €25,000 to €90,000 (about $28,600 to $102,900) and will start expiring August 15th, 2019, although a few will last until 2020. The link for this article located at Engadget is no longer available. . These include well-known tools like VLC Media Player, KeePass, 7-zip and Drupal as well as something. european, union, believes, simple, bolster, digital, security, offer. . LinuxSecurity.com Team
Pinterest. The social networking site this week announced that it would begin paying cash rewards through its bug bounty program, upping the stakes from the T-shirt it originally offered last May when it kicked off the Bugcrowd-hosted initiative. The link for this article located at ThreatPost is no longer available. . The social networking site this week announced that it would begin paying cash rewards through its b. pinterest, social, networking, announced, would, begin, paying, rewards. . LinuxSecurity.com Team
The open-source Mozilla project has been offering cash bounties for security bugs for six years now, but often bug finders simply turn down the cash.. Between 10 percent and 15 percent of the serious security bugs reported since Mozilla launched its bug bounty program have been provided free of charge, according to Mozilla. "A lot of people would say, 'Don't worry about it. Donate it to the EFF [Electronic Frontier Foundation] or just send me a T-shirt,'" said Johnathan Nightingale, the director of Firefox development, in a recent interview. Mozilla was a pioneer in this area. It started offering a US$500 bounty for security bugs in August 2004. Since then, it's had more than 120 bugs reported by about 80 researchers. The project recently upped its bounty and is now paying out a maximum of $3,000 for critical security bugs. A few weeks later, Google announced that it, too, would pay up to $3,000 for security bugs reported in its products. The link for this article located at Network World is no longer available. . Between 10 percent and 15 percent of the serious security bugs reported since Mozilla launched its b. open-source, mozilla, project, offering, bounties, security, years. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.