PayPal opens bug bounty program to minors

[InfoSec News <alerts () infosecnews org>]

https://www.computerworld.com/s/article/9241075/PayPal_opens_bug_bounty_program_to_minors

By Jeremy Kirk
IDG News Service
July 25, 2013

PayPal is opening up its bug bounty program to individuals aged 14 and 
older, a move intended to reward younger researchers who are technically 
ineligible to hold full-fledged PayPal accounts.

PayPal's program, which is a year old this month, only applied to those 18 
years and older. Under the old rule, participants in the program were 
required to hold valid accounts, which excluded minors, said Gus Anagnos, 
PayPal's director of information security.

In May, 17-year-old Robert Kugler, a student in Germany, said he'd been 
denied a reward for finding a vulnerability. PayPal said the bug had 
already been found by two other researchers, which would have made Kugler 
ineligible for bounty.

In an apparent miscommunication, Kugler said he was initially told he was 
too young rather than the bug had already been discovered. Nonetheless, 
PayPal said it would look to bring younger people into its program, which 
pays upwards of $10,000 for remote code execution bugs on its websites.

[...]



--
Find the best InfoSec talent without breaking your budget!
Post a Job! $99 for 31 days
http://www.hotinfosecjobs.com/