Sony presents the so-called PlayStation Bug Bounty Program, with which they hope to find fault with the community in exchange for remuneration.
Sony Interactive Entertainment has unveiled the PlayStation Bug Bounty Program, a paid and collective action for which PlayStation 4 console users will participate in the active search for bugs of various kinds on both PS4 and the PlayStation Network’s online infrastructure.
With the aim of identifying possible risks and vulnerability gaps in time, the Japanese company will offer up to $ 50,000 for those who find the most serious risks, although the average is around $ 400. Not all vulnerabilities are covered by this program, so not all failures will be compensated financially, but those described in the officially enabled portal will be.
Sony wants to identify security breaches on PS4
This portal is HackerOne, essentially dedicated to these purposes with companies or personalities on an independent basis. In this case, Sony has officially applied to this website and, judging from what has been seen, the highest priority failures are PS Store, the “wallets” department, which refers to the link that directs bank card management and payment methods in each PSN profile, or the same PlayStation Network with all its domains and subdomains.
What if you identify a bug? As they explain, Sony needs a “reasonable time” to evaluate and contrast the veracity of this vulnerability. If so, the company will contribute to the author through the agreed payment. Currently, the program’s statistics reflect a total of $ 61,900 already paid to the more than 100 reports identified during the last ninety days.
All possible bugs on PS1, PlayStation 2, PS3, PS Vita and PSP do not count towards the program because Sony is not currently working on such hardware; Despite the fact that the most current portable console, PlayStation Vita, does receive updates from time to time for its firmware. Sony’s future is called PS5; the console will come out at the end of the year with two models.
References | PlayStation, HackerOne
