Intel has strengthened its vulnerability rewards program to intercept Spectre and other vulnerabilities as soon as possible.
Bloomberg via Getty Images
Although intel has responded promptly to the Meltdown and Spectre vulnerabilities, they have severely affected the public's confidence in their products. In order to fix the vulnerability before it causes actual losses, Intel hopes to provide more external assistance. They have strengthened their current vulnerability reward program. In addition to increasing the general security defect reward amount to $0.1 million, they also added a reward grade of up to $0.25 million this year, specially targeting Side-channel attack attacks such as Spectre ).
Intel said they would be willing to offer a higher reward because of the complexity of bypass attacks. If you want to execute or discover vulnerabilities such as Meltdown and Spectre, you must have a deeper and broader knowledge of engineers.
However, this new $0.25 million reward level is only valid until December 31, 2018, because intel has promised to improve chip security within the year, so this plan is also for old chip products. Although intel has stressed that the vulnerability rewards program will continue to "strengthen", it does not mean that it will continue to provide such a high amount of rewards, it seems that hunters who are interested in finding vulnerabilities in Intel chip products will have to speed up their move!
Source: Intel
Https://www.bkjia.com/Linux/2018-02/150947.htm