Why hunting bugs online is a lucrative job
1/5
Bug bounty explained
Ethical hackers try to break into computer systems and secure networks, and make thousands of dollars out of it.
None of this involves holding data to ransom, or misusing credit cards.
They participate in formal "bug bounty" programmes held by the likes of Uber, Facebook, Tesla, and even government institutions.
None of this involves holding data to ransom, or misusing credit cards.
They participate in formal "bug bounty" programmes held by the likes of Uber, Facebook, Tesla, and even government institutions.
2/5
For acknowledgements
Others offer only bragging rights in the form of certificates and acknowledgements, which security researchers can add to their profile to build credibility.
The bounty or the prize depends on the seriousness of the bug reported, and also on the quality of the "vulnerability report" filed by the hacker.
These reports can be made public for all to read and learn from, but only once the bug has been fixed.
The bounty or the prize depends on the seriousness of the bug reported, and also on the quality of the "vulnerability report" filed by the hacker.
These reports can be made public for all to read and learn from, but only once the bug has been fixed.
3/5
The scene in India
The ethical hackers that TOI spoke with for this story feel that participating in international bug bounty programmes is a better use of time.
"You don't get to hear much about Indian startups or other companies holding bug bounty programmes. If you still report a bug to them, they are likely to regard you with suspicion," says the 24-year-old.
"You don't get to hear much about Indian startups or other companies holding bug bounty programmes. If you still report a bug to them, they are likely to regard you with suspicion," says the 24-year-old.
4/5
Booming industry
Bug bounty hunters from India are among the top performers globally.
According to a June 2016 report from US-based information security portal Bugcrowd that hosts bug bounty programmes, India tops the list for submissions of bug reports by country.
Yet, Indian companies holding bug bounty programmes are few and far between.
According to a June 2016 report from US-based information security portal Bugcrowd that hosts bug bounty programmes, India tops the list for submissions of bug reports by country.
Yet, Indian companies holding bug bounty programmes are few and far between.
5/5
Cash rewards
Malware Tech, an anonymous security expert got $10,000 in bounty from bug bounty hosting platform HackerOne earlier this month for discovering a "kill switch" in the ransomware Wannacry
Snapchat paid 125 researchers $70,000 between 2014 and 2016
The US Government's Hack the Pentagon program also paid $70,000 in all to researchers in March 2016, with a maximum bounty of $3500
Text from TNN
Snapchat paid 125 researchers $70,000 between 2014 and 2016
The US Government's Hack the Pentagon program also paid $70,000 in all to researchers in March 2016, with a maximum bounty of $3500
Text from TNN