Google Chrome HTTPS Address Bar Spoofing

blog.acrossecurity.com

103 pointsdielel4 comments

did you know that Google pays the developers who submit security bugs on Chrome?

Both Chrome and Firefox do. These "bug bounties" have more than paid for themselves. (Disclaimer: I'm a Mozilla developer)

I remember a recent HN thread about that. I think Google has a $500 minimum for anyone who can show them a security flaw/bug.

Holy cow. Google hosts an open redirection? Amazon shut down its open redirectors 5 years ago.