AMD Have a Refreshed Bug Bounty Program with Rewards Up to $30,000

[Nomad76]

AMD has announced a new bug bounty program with prizes for individuals and public researchers. The company is partnering with the cloud security provider Intigriti on this new "bugs hunting campaign", this time, they have a better reward system with up to $30,000 in cash up for grab, while more people can take part. Bug bounties are not new in the industry, with modern hardware, bugs and issues have increased, this being a good way for companies to find vulnerabilities without spending too much on detection.

Individuals look for bugs, and then send a report to the company describing the bug and its impacts, AMD then gives prizes to the hunters based on factors like bug severity. It will be at least interesting to see what happens with AMD's new bug bounty program since public researchers can now take part.

(Eligible list with products and technologies below)





Eligible AMD branded products and technologies that are in scope of the Program:

• 3rd Gen AMD EPYC Processors ("Milan") - Includes AMD EPYC 7xx3, 7xx3X
• 4th Gen AMD EPYC Processors ("Genoa") - Includes AMD EPYC 9xx4, 9xx4X
• AMD Ryzen 7000 Series Mobile Processors with Radeon Graphics ("Rembrandt-R", "Dragon Range", "Mendocino", "Phoenix") - Includes AMD Ryzen 7020, 7035, 7040, 7045, Athlon Gold 7220U, Athlon Silver 7120U
• AMD Radeon RX 7000 Series ("Navi 3x") (Latest available version)
• AMD Radeon PRO W7000 Series ("Navi 3x") (Latest available version)
• Xilinx Runtime (XRT) (Latest available version)
• Bootgen (Latest available version)
• Pensando Policy & Security Manager (PSM) (Latest available version)

View at TechPowerUp Main Site | Source

 

[chrcoluk]

Good business, pay for some bug reports, patch them and slow down the CPU, then it creates a demand for a newer CPU to buy with bug patched and performance restored.

 

[Durvelle27]

Paying consumers to do your job. Can’t even be mad at that

 

[R-T-B]

Good business, pay for some bug reports, patch them and slow down the CPU, then it creates a demand for a newer CPU to buy with bug patched and performance restored.

It also actually helps create a secure product.

 

[FreedomEclipse]

Good. Maybe GPu bugs will finally get sorted.

 

[alwayssts]

It also actually helps create a secure product.

Right. To put it in terms you, but perhaps few else will understand:

This invites an introduction to green-hats. It's also invites blue-hats and certainly grey-hats to turn white. You know, to protect from the black/red, or go down the route of perhaps becoming blue.

I very-much encourage/applaud these initiatives, and wish others were perhaps just a little less cynical.

 

[JohH]

It's common for software companies to have bug bounties.

 

[Thimblewad]

Good business, pay for some bug reports, patch them and slow down the CPU, then it creates a demand for a newer CPU to buy with bug patched and performance restored.

I believe you have missed out on like a bazillion of bugs that Intel had to patch before AMD, because they use architecture standards older than the century

 

[chrcoluk]

I believe you have missed out on like a bazillion of bugs that Intel had to patch before AMD, because they use architecture standards older than the century

My comment wasnt aimed at AMD specifically, but I do think CPU vendors benefit from this stuff as it ultimately creates demand for new CPUs.

 

[Vayra86]

Right. To put it in terms you, but perhaps few else will understand:

This invites an introduction to green-hats. It's also invites blue-hats and certainly grey-hats to turn white. You know, to protect from the black/red, or go down the route of perhaps becoming blue.

I very-much encourage/applaud these initiatives, and wish others were perhaps just a little less cynical.

Hats off to you