Refresh of the Mozilla Security Bug Bounty Program

[spinynorman 0]

For new bugs reported starting July 1st, 2010, Mozilla are changing their bounty payment from $500 to $3,000 US per eligible security bug.

 

They have also clarified the products covered under the bounty to better reflect the threats they are focused upon. They still include Firefox and Thunderbird obviously, but they have also added Firefox Mobile and any Mozilla services that those products rely upon for safe operation. These are products they have traditionally paid bounties for in a discretionary basis anyway, but they wanted to make that explicit. Release and beta versions of those products are eligible.

 

More on the Mozilla security blog.