[Year 12 SofDev] United Airlines rewards people finding minor code flaws... arrests people who find serious flaws

[Mark]

"UNITED AIRLINES ANNOUNCED this week that it’s launching a bug bounty
program inviting researchers to report bugs in its websites, apps and
online portals...

"The announcement comes weeks after the airline kicked a security
researcher off of one of its flights for tweeting about vulnerabilities in
the Wi-Fi and entertainment networks of certain models of United planes
made by Boeing and Airbus.

"It’s believed to be the first bounty program offered by an airline. But
curiously, United’s announcement doesn’t invite researchers to submit the
most crucial vulnerabilities researchers could find—those discovered in
onboard computer networks, such as the Wi-Fi and entertainment systems. In
fact, the bounty program specifically excludes “bugs on onboard Wi-Fi,
entertainment systems or avionics” and United notes that “[a]ny testing on
aircraft or aircraft systems such as inflight entertainment or inflight
Wi-Fi” could result in a criminal investigation."

Read more at

http://www.wired.com/2015/05/united-will-reward-people-flag-security-flawssort/

-- 

>> Witty sig goes HERE <<

Mark Kelly
mark AT vceit DOT com
http://vceit.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.edulists.com.au/pipermail/sofdev/attachments/20150515/d31039d3/attachment.html