Categories: NewsSecurity

Companies are paying hackers millions to discover security flaws

The internet has long been plagued by hackers who, more often than not, will even commit crimes in order to get paid. Although there are a lot of malicious hackers out there, there are also ethical hackers, known as white-hat hackers. These have even been getting six-figure salaries by helping companies take care of vulnerabilities.

Paying millions to get hacked

Major tech companies such as Apple and Google have bounty programs

, in which they pay those who find vulnerabilities to report back to them, instead of trying to take advantage. Depending on the exploit, payouts can be extremely high.

Other tech companies that don’t have the resources Google and Apple have need to rely on other alternatives. HackerOne, a San Francisco-based company described as a “vulnerability coordination and bug bounty platform” has reportedly helped over 800 companies and paid over $16 million in bonuses to white-hat hackers.

According to the New York Post, even though the company was founded in 2012, most of the bounty was paid in the last two years, as only recently have companies become more aware of their own vulnerabilities and how damaging these can be.

What the company does is, essentially, connect companies with white-hat hackers, providing both sides with a win-win situation. Companies certainly prefer to pay hackers that will report back to them instead of being exploited by others. Hackers who want to get paid for their skill also benefit from the platform, as independently contacting companies informing them about their exploits often ends up with jail threats.

Throughout the years, HackerOne has managed to persuade some of the biggest companies out there, including Yahoo!, Uber, General Motors, Twitter, and even the US Department of Defense to take advantage of its services.

Speaking to the New York Times, HackerOne co-founder and former Facebook product security guru, said:

Related Post

“Every technology has vulnerabilities, and if you don’t have a public process for responsible hackers to report them, you are only going to find out about them through attacks in the black market.”

Past wake-up calls

Companies have been alerted by several recent wake-up calls that showed them just how certain vulnerabilities can compromise their operations. Back in 2015, for example, hackers managed to control a Jeep using a laptop miles away, while the driver was still in it. The event forced Chrysler to recall over a million vehicles.

Another wake-up call came when US security researcher Matt Jakubowski found that Mattel’s Wi-Fi enabled Hello Barbie doll was vulnerable when connected to Wi-Fi. Hackers could gain direct access to the doll’s system information, stored audio files, and even direct access to the microphone. Even though the doll only listened to conversations when a button was being pressed and encrypted recorded audio before sending it over the internet, these features could then be overwritten by a hacker.

Speaking on the matter, HackerOne Chief Executive Marten Mickos said:

“It may sound silly, a doll, but it’s your child.”

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

Francisco Memoria

Francisco is a cryptocurrency enthusiast who's lucky enough to be able to write about his passion.

Share
Published by
Francisco Memoria
Tags: hacksecurity

Recent Posts

BlockDAG Excels With 30,000x ROI Potential, Outshining NEAR Protocol’s Price Gain And Render Token’s Emerging Promise

Render Token is advancing with significant updates like OctaneBench integration and a new pricing algorithm,…

45 mins ago

Comparing Generative AI Cryptos SingularityNET, Akash Network, and Raboo 

Projects all across the crypto market began integrating cutting-edge technology as a core part of…

9 hours ago

Wormhole Brings More Interoperability to Arbitrum; KangaMoon and Optimism Eye Bullish Rally As Top Altcoins

Wormhole has recently taken some big steps towards improving compatibility on Arbitrum (ARB). At the…

10 hours ago

How to Become a Millionaire With These 3 Under $0.1 Cryptocurrencies

Option2Trade (O2T), Shiba Inu (SHIB), and Bonk (BONK) present compelling investment opportunities for those seeking…

10 hours ago

Analysts Doubt Memecoins’ Role in Crypto Bull Run, Recommend OP and ALGT

Memecoins Like WIF and SHIB Will Not Encourage a Crypto Bull Run, Analyst Recommends OP…

10 hours ago

BDAG’s 1000x ROI & 8+ New Payment Options Beat Ethena & Toncoin

BlockDAG‘s 1000x ROI & 8+ New Payment Options Surpasses Ethena Prices & Toncoin Investors’ Interest…

10 hours ago