Gamasutra is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


Gamasutra: The Art & Business of Making Gamesspacer
View All     RSS
September 21, 2019
arrowPress Releases







If you enjoy reading this site, you might also want to check out these UBM Tech sites:


Valve tweaks bug bounty program after 'mistakenly' turning away researchers

Valve tweaks bug bounty program after 'mistakenly' turning away researchers

August 23, 2019 | By Alissa McAloon

August 23, 2019 | By Alissa McAloon
Comments
    Post A Comment
More: Console/PC



Valve has expanded the scope of its HackerOne bug bounty program after a researcher was turned away for submitting a valid vulnerability found in Valve’s game distribution platform Steam.

That change to the program comes as part of a larger story covered by Ars Technica in which two researchers had their bug bounty submissions rejected by the HackerOne campaign, and in one case being told they were no longer able to submit future bugs following the rejection.

Following one of these rejections, Valve issued a statement to Ars acknowledging that the researcher was “incorrectly turned away” and that the idea that his report was classified as out of scope “was a mistake.”

“Our HackerOne program rules were intended only to exclude reports of Steam being instructed to launch previously installed malware on a user’s machine as that local user. Instead, misinterpretation of the rules also led to the exclusion of a more serious attack that also performed local privilege escalation through Steam,” reads the statement.

The new update to Valve’s HackerOne program now states that those above issues do fall within the scope of the bounty program. Beyond that, Valve notes that it is reviewing the details of the situations with some researchers, likely those mentioned in Ars’ report, but will not comment on any specifics.



Related Jobs

HB Studios
HB Studios — Lunenburg/Halifax, Nova Scotia, Canada
[09.20.19]

Experienced Software Engineer
Sucker Punch Productions
Sucker Punch Productions — Bellevue, Washington, United States
[09.19.19]

UI Artist
Sucker Punch Productions
Sucker Punch Productions — Bellevue, Washington, United States
[09.19.19]

Senior Lighting Artist
Insomniac Games
Insomniac Games — Burbank, California, United States
[09.19.19]

Lead Material Artist









Loading Comments

loader image