Marc Maiffret, BeyondTrust's CTO, was recently interviewed on USA Today in the article, "The long road from Code Red to Microsoft's bug bounty", where he discussed with Byron Acohido Microsoft's concession to finally begin paying bug bounties. They talked about why this is a big deal for Microsoft and what Maiffret thinks about this new program.
An excerpt from the interview is below.
CT: Why do you think Microsoft has lagged so far behind Google and Mozilla in paying bounties to grey and white hat researchers?
Maiffret: Microsoft had taken a stance against bug bounties a few years ago and I think it has taken them time and some internal struggle to finally come to terms with changing their position.
CT: Why do you think Microsoft has finally come around?
Maiffret: I think they realize there can be a lot of value in such programs but also I think they have found a balance to a bug bounty program that they think works for them vs. some of the more broad bug bounty programs that other software companies have. Microsoft's is a bit more narrow in focus currently, but it is only the beginning.
Read the entire interview on USA Today >>
