<http://threatpost.com/en_us/blogs/microsoft-says-no-paying-bug-bounties-072210>

<quote>
Microsoft has no plans to follow in the footsteps of Mozilla and
Google and pay researchers cash rewards for the bugs that they find in
Microsoft's products.

In the wake of both Mozilla and Google significantly increasing their
bug bounties to the $3,000 range, there have been persistent rumors in
the security community that Microsoft soon would follow suit and start
paying bounties as well. However, a company official said on Thursday
that Microsoft was not interested in paying bounties.
</quote>

If they did it would bankrupt them unless they paid about $1 per
bug. :-)

On 7/23/2010 11:10 AM, Hardon wrote:
> <http://threatpost.com/en_us/blogs/microsoft-says-no-paying-bug-bounties-072210>
>
> <quote>
> Microsoft has no plans to follow in the footsteps of Mozilla and
> Google and pay researchers cash rewards for the bugs that they find in
> Microsoft's products.
>
> In the wake of both Mozilla and Google significantly increasing their
> bug bounties to the $3,000 range, there have been persistent rumors in
> the security community that Microsoft soon would follow suit and start
> paying bounties as well. However, a company official said on Thursday
> that Microsoft was not interested in paying bounties.
> </quote>
>
> If they did it would bankrupt them unless they paid about $1 per
> bug. :-)


More than 600,000 Ubuntu bugs have been reported to launchpad.

At $3,000 each, that's $1.8 billion (less dupes, let's call it an even 
billion).

MS could handle it easily.  Linux freakazoids would have to get Mom to 
mortgage her house.



"Whatever their problems is not the fault of Ubuntu"

On 2010-07-23, Hardon <hardon.quark@gmail.com> claimed:
><http://threatpost.com/en_us/blogs/microsoft-says-no-paying-bug-bounties-072210>
>
><quote>
> Microsoft has no plans to follow in the footsteps of Mozilla and
> Google and pay researchers cash rewards for the bugs that they find in
> Microsoft's products.
>
> In the wake of both Mozilla and Google significantly increasing their
> bug bounties to the $3,000 range, there have been persistent rumors in
> the security community that Microsoft soon would follow suit and start
> paying bounties as well. However, a company official said on Thursday
> that Microsoft was not interested in paying bounties.
></quote>
>
> If they did it would bankrupt them unless they paid about $1 per
> bug. :-)

Even that would bankrupt them unless they cut the timing of it off
after a week. That would probably be pushing it as well, but I think
they might be able to recover eventually.

-- 
UNIX is a computer virus with a user interface.
Aspire One, Linux Mint 9 (LXDE)
Friends don't let friends use Windows