Intel Expands Bug Bounty Program To Include Side-Channel Attacks

[Lucian Armasu]

Following the Meltdown and Spectre revelations, Intel will expand its bug bounty to include side-channel bugs, and the company will pay the researchers bigger awards for finding flaws in its chips.

Intel Expands Bug Bounty Program To Include Side-Channel Attacks : Read more

 

[RCaron]

Why don't you say that this is the industry norm? That Intel is doing what everyone has always done with Academia.. seek support to find problems in the circuits they're building.

Nice to see Intel finally asking others to check their work after so many bugs have been discovered in their CPU's, as opposed to burying or outright ignoring work that showed bugs, which Intel has done several times in the past.

The only difference are these scholarships that Intel is offering to Academics, or industry professionals, that actually find something. This is nice, as it'll provide support for what is very difficult work.

 

[redgarl]

After years of prioritizing performance over security, Intel is now proposing silicon bounties...

I cannot wait to see the impact on performance for patching their architectures.

 

[JamesSneed]

After years of prioritizing performance over security, Intel is now proposing silicon bounties...

I cannot wait to see the impact on performance for patching their architectures.

It probably will be negligible if the changes are in the silicon and not patches via microcode or OS code.