Posted in: Games, Microsoft, Video Games | Tagged: microsoft, xbox

Microsoft Offers To Pay Xbox Users Who Find Bugs

Published Sun, 02 Feb 2020 14:40:42 -0600

Microsoft is offering cold hard cash to Xbox players who use their products on a regular basis to find bugs and report them so they can be fixed. The company posted a notice for the Xbox Bounty Program, in which they are offering cash rewards to players who find legitimate bugs in their system. With payouts ranging from $500 all the way to $20k! Basically, they're willing to pay those who care about their system the most to help them identify possible issues and problems so they can fix them in advance. However, there is a catch, as the payout is based on their discretion and the severity of what you find. So it isn't guaranteed money if you just find an audio issue. Nor are you promised $20k for finding a way to DDoS them. Here are the details of how you can get in on the program.

WHAT CONSTITUTES AN ELIGIBLE SUBMISSION?

The goal of the bug bounty program is to uncover significant vulnerabilities that have a direct and demonstrable impact on the security of Microsoft's customers. Vulnerability submissions must meet the following criteria to be eligible for bounty award:

Identify a previously unreported vulnerability that reproduces in our latest, fully patched version of Xbox Live network and services at the time of submission.

Include clear, concise, and reproducible steps, either in writing or in video format.

This allows submissions to be reviewed as quickly as possible and supports the highest bounty awards.

GETTING STARTED

Sign up for an Xbox network account. We recommend creating one or more test accounts to conduct security vulnerability research.

Access to a Xbox 360, Xbox One, Xbox One S or Xbox One X is not required for testing but may be useful. Please note, consoles will not be provided for testing purposes.

Access to a Xbox Gold, Project xCloud, Xbox Game Pass, Xbox Game Pass for PC or Xbox Game Pass Ultimate account is not required for testing but may be useful. Please note, paid accounts will not be provided for testing purposes.