My Experience Reporting Web Bugs to Microsoft (MSRC) for the First Time - Bug Bounty or No Bounty

Its been more than 8 years since I played around with Web Bugs. Seems threat landscape and things has changed significantly. However recently i reported few "low hanging" web related problems to MSFT. Most of the issues were mostly configuration issues, and all of the issues are fixed now however no bounty paid. What i came to know, unlike Facebook VRP, MSRC doesn't pay researcher even if they make any changes as result of your report. 

Link to Official Acknowledgements - 

https://msrc.microsoft.com/update-guide/en-us/acknowledgement/online 



Comments

  1. 토토 Wonderful story, reckoned we could combine a few unrelated data, nevertheless definitely really worth taking a search, whoa did one particular study about Mid East has got additional problerms at the same time

    ReplyDelete
  2. Hello would you mind letting me know which web host you’re utilizing?
    I’ve loaded your blog in 3 completely different browsers and
    I must say this blog loads a lot faster then most.
    Can you suggest a good internet hosting provider at a honest price?
    Many thanks, 스포츠토토
    I appreciate it!

    ReplyDelete
  3. I have been exploring for a little for any high-quality articles or
    blog posts in this kind of house . 바카라사이트
    Exploring in Yahoo I at last stumbled upon this site.
    Reading this information So i am glad to show that
    I have an incredibly good uncanny feeling I discovered exactly what I needed.
    I most for sure will make sure to do not forget this website and
    provides it a glance on a constant basis.

    ReplyDelete
  4. whoah this blog is fantastic i love reading your posts. 온라인카지노
    Keep up the great work! You know, lots of people are looking around for this information, you could aid them greatly.

    ReplyDelete
  5. Debasish, you are really a genius because web bugs are not that easy to solve. You have gained so much experience after spending so long that you can solve them so quickly you should also provide business analytics consulting services that people can benefit from.

    ReplyDelete
  6. Homework is an essential part of school life. It is one of the most important things that a student must know. do my homework cheap plays a major role in the success of the students. It is essential for students to complete their homework.

    ReplyDelete
  7. For example, coats have more adjusted and Warrior Viper Pilot Jacket organized shoulders, while overcoats' style is more similar to that of unstructured coats: basic, with gentler shoulders and a laidback fit.

    ReplyDelete
  8. Paying another person to compose your Turning Every Write My Essay Request into Success paper is a type of copyright infringement and cheating. Copyright infringement or duplicating somebody's work without acknowledging them is considered as a serious sort of wrongdoing. Schools and colleges have severe guidelines against it. Nonetheless, it isn't against the law to employ somebody to compose your article on the web.

    ReplyDelete
  9. Whether your project requires backfillingEarthwork service texas in houston after installing underground utilities or removing dirt to make place for subsurface infrastructure

    ReplyDelete
  10. All players, including novices and seasoned Valorant Dubaigamblers, can participate in tournaments, which provide a selection of game modes.

    ReplyDelete
  11. This is where a company loan can help, as itTrade finance in Dubai allows you a swift infusion of capital to fuel your growth, which you simply pay back in tiny amounts at regular intervals.

    ReplyDelete
  12. It's unfortunate that Microsoft doesn't offer rewards to researchers who report security issues, even if they lead to improvements. Nevertheless, it's still important to report such issues in order to help improve the security of web applications. In the meantime, it's always a good idea to keep your personal information safe by getting regular Interior Car Cleaning Ottawa.

    ReplyDelete
  13. Web security landscape has indeed evolved tremendously over the past 8 years, and it's great to see researchers like you actively contributing to improving online safety. It's unfortunate that MSRC doesn't offer monetary rewards for configuration-related issues, despite the valuable impact they can have on overall security. Just as Lime Kiln Dust in Tampa brings a unique twist to the city, your findings brought important insights to the table, helping make the web a safer place. Keep up the great work

    ReplyDelete
  14. Indeed, the cybersecurity landscape has evolved over the past 8 years, just like how Reliable Reliable Commercial Fencing Company in Edmonton has adapted to meet modern security needs. Stay vigilant and updated to protect against new threats!

    ReplyDelete
  15. Sharing insights on reporting web bugs to Microsoft – a first-hand experience navigating the world of bug bounties. 🐞💻 And for convenient care, explore Mobile Car Wash services in Ottawa, where your vehicle receives expert attention at your doorstep.

    ReplyDelete
  16. El Abogado de Tráfico en Dinwiddie, VA, es un profesional legal especializado en asuntos de violaciones de tráfico en el condado de Dinwiddie, Virginia. Con un profundo conocimiento de las leyes locales de tráfico y los procedimientos judiciales, ofrece orientación y representación experta a clientes que enfrentan una variedad de infracciones, como multas por exceso de velocidad o cargos de conducción imprudente. Su dedicación a la protección de los derechos de los clientes y su historial de éxito lo convierten en un recurso valioso para aquellos que buscan resolver y obtener asesoramiento legal en asuntos de tráfico en Dinwiddie, VA. Abogado Tráfico Dinwiddie VA

    ReplyDelete
  17. Reporting web bugs to Microsoft's MSRC is a commendable act of contributing to online security. While bug bounties may not always be the reward, knowing you're helping make the digital world safer is priceless. To keep your real-world spaces comfortable, consider a reliable kdk fan in Dubai – they offer quality and efficiency for your cooling needs

    ReplyDelete
  18. "Your experience reporting web bugs is a testament to your dedication and commitment to improving the online experience for all users. Your keen eye for detail, tenacity in tracking down issues, and your willingness to work with developers and webmasters to find solutions is truly commendable. By taking the initiative to report these bugs, you're not only helping to enhance the functionality and security of websites but also contributing to a better internet for everyone. Your efforts make a significant impact, and it's inspiring to see individuals like you actively engaging in the process of making the web a more reliable and user-friendly place. Keep up the great work, and know that your contributions are greatly appreciated by users and web administrators alike!"

    division of assets divorce new york

    ReplyDelete
  19. Great read on your experience reporting web bugs to Microsoft! Bug reporting plays a vital role in digital security. Just as you contribute to the cyber landscape, ensure the reliability of your industrial processes with top-notch chemical injection in UAE Much like bug fixes, these pumps guarantee precise chemical flow, maintaining operational integrity. Here's to a secure digital world and chemical precision in industrial settings!

    ReplyDelete
  20. "Eight years later, the web bug landscape has evolved, but reporting web-related issues to MSFT highlights a different bounty approach. Despite valuable contributions, no rewards from MSRC; perhaps a sweet compensation could come in the form of indulging in truffle in Jeddah for the dedicated efforts."





    ReplyDelete
  21. This comment has been removed by the author.

    ReplyDelete

Post a Comment