News for hackers. Stuff that matters.

A comment on Exploit broker Zerodium ups the ante with $500k to target Signal and WhatsApp. Parent comment

Re:Exploit broker Zerodium ups the ante with $500k to target... by gcp on Thursday August 24, 2017 @08:00AM (#15089338)
Unfortunately, The bounty from the tor project isn't nearly as much

It sounds like it's a privacy leak, but not an RCE/SBX? Especially as it's saying that the sandboxed version of Tor isn't affected.

Bit sad that you can't click the revisions on https://trac.torproject.org/projects/tor/ticket/23044#no2 to see the diff.

[ Parent | on HN ]
Re:Exploit broker Zerodium ups the ante with $500k to target... by julianj on Thursday August 24, 2017 @10:21AM (#15090303)
So I believe the max bounty without a bonus for any Tor vuln through their bug bounty program is 4k. The max for the Tor Browser Bundle is 3k.
[ Parent | on HN ]