Valve have began providing bounties on safety flaws of their providers, with money awards for hackers who come ahead with recognized vulnerabilities. The bounties cowl Steam, Steam apps, Valve-owned internet domains, Valve video games, and multiplayer and financial system elements associated to these video games.
It’s not an unusual observe, and Valve be a part of tech corporations as important as Twitter and Nintendo in rewarding white hat hackers for reporting safety flaws by means of their HackerOne board. Bug stories will likely be rewarded in keeping with CVSS-ranked severity, starting from $0-$200 on the low finish as much as $2,000 or extra for extreme and important vulnerabilities.
The bounties solely cowl correct vulnerabilities, with decrease key sport bugs and exploits nonetheless going by means of Valve’s assist web site. In the three days for the reason that program’s been up, over $100,000 in bounties have been paid out, with 40 hackers thanked for his or her help. Valve do ask you chorus from DDOS assaults and social engineering in your makes an attempt to seek out vulnerabilities, although.
Valve appear to be gearing up for a relaunch on their internet presence, with an internet site redesign briefly logging on earlier at the moment – teasing “top secret” new games, too – and the long-reported Steam UI redesign nonetheless coming down the pipe.
Source