AMD Stiffs Researcher $10k Bug Bounty
A security researcher discovered a critical remote code execution vulnerability in AMD's Windows auto-updater that allowed for man-in-the-middle attacks. Despite fixing the flaw, AMD refused to pay the researcher the expected $10,000 bug bounty, citing policy exclusions.
Why it matters
This highlights ongoing tensions between tech companies and security researchers regarding bug bounty policies and the responsibility of corporations to secure their update infrastructure.
AMD refused $10,000 bounty to researcher Paul LaRosa despite fixing HTTP vulnerability in Windows auto-updater
The article reports on a specific dispute using factual claims about the vulnerability, though it uses slightly emotive language like 'stiffed'.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in