Skip to main content

Google guves Rs 71 lakh to Chinese researchers for Pixel devices

Google awarded over  USD 112,000 to a Chinese security researcher for reporting an exploit in Google Pixel smartphones.
The Android security team posted in the Google developers forum that Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd. had submitted a working remote exploit chain in August 2017. This was the first such exploit since the expansion of Android Security Rewards (ASR) program.
“For his detailed report, Gong was awarded USD 105,000, which is the highest reward in the history of the ASR program and USD 7,500 by Chrome Rewards program for a total of USD 112,500,” Mayank Jain and Scott Roberts wrote for the Android security team.

Gong in a blog post also outlined the bugs he and his team discovered.
The issues reported by Gong and others as well were resolved as part of the December 2017 monthly security update. The company thanked researcher community for their contributions.
All pixel devices will automatically install these updates however the users need to restart their devices to complete the installation.
The internet giants through its Android security rewards program recognises the contributions of security researchers who invest their time and effort in identifying bugs and vulnerabilities. The program covers security vulnerabilities discovered in the latest available Android versions for Pixel phones and tablets. Currently, Pixel 2, Pixel, Pixel XL, Pixel C are the devices under the program.
Last year, rewards were increased under the program. Rewards for a remote exploit chain or exploit leading to TrustZone or Verified Boot compromise was increased from USD 50,000 to USD 200,000. Whereas, rewards for a remote kernel exploit increase from USD 30,000 to USD 150,000.

Labels:

Comments

Post a Comment

Popular posts from this blog

The big hack: How China used a tiny chip to steal data from US companies like Amazon, Apple

Apple made its discovery of suspicious chips inside Supermicro servers around May 2015, after detecting odd network activity and firmware problems, according to a person familiar with the timeline. Amazon in its three-year secret investigation uncovered the malicious chips while examining servers manufactured by a start-up called Elemental technologies, which Amazon eventually acquired. Bloomberg  reported that China had inserted tiny chips into computer equipment manufactured for about 30 US companies, including Apple and Amazon, to steal its technology secrets, citing government and corporate sources. The report further said that the chips were used in equipment made for various US companies and government agencies. According to  Bloomberg,  Amazon in its three-year secret investigation uncovered the malicious chips while examining servers manufactured by a start-up called Elemental technologies, which Amazon eventually acquired Bloomberg  ...
Post a Comment
Read more

Mi TV 4A Early Access Program for Android 9 Pie Update Announced by Xiaomi

The TVs were originally launched running Android 6-based software. HIGHLIGHTS THE XIAOMI MI TV 4A SERIES IS ON TRACK TO BE UPDATED TO ANDROID 9 PIE Xiaomi has initiated the Early Access Program for the update Only 50 active Mi fans will be chosen for the Early Access Program Xiaomi has seen some success with its TV lineup in India, and the affordable Mi TV 4A that was launched in 2018 is among its most popular options. While the lineup has been replaced by the Mi TV 4A Pro and other similar lines, Xiaomi is continuing to service its original models. Now in line for a firmware update are the 32-inch and 43-inch Mi TV 4A models, with Xiaomi announcing that a major update bringing Android 9 Pie-based Android TV to the popular TV range is in the works. The Chinese electronics company has just initiated an Early Access Program for the Android 9 Pie update for the Xiaomi Mi TV 4A series, with 50 active Mi fans set to be chosen to receive early access to the new f...
1 comment
Read more