Comments on: Mozilla puts bounty on bugs

String of high-profile browser bugs prompts foundation to offer cash reward to those who uncover security holes.

[Jonathan]

How to update FireFox?

Ya know I'm no big fan of Internet Imploder but I do like one thing. When I have to apply a sec patch I don't have to reinstall the intire application. AFAIK all the people I've migrated over to firefox over the last year I will now have to revisit to uninstall Firefox .8 or .9 and reinstall the latest version. At least IE you download a couple MB patch , install it, reboot, and you are done.
I think before V1 is officially released the folks at Mozilla need to figure out a better way of doing on the fly updates because this download the 4.7MB update, and go through the motions every time there is a new flaw found and patched is going to wear thin REAL fast with users. No one likes to apply patches but to MS's credit they do it in a relatively painless manner (Until the patch breaks something but that's another discussion for another day.

[Darryl Snortberry]

You Don't Have To Reinstall

Mozilla should have done a better job of letting people know but you don't have to reinstall the entire application although that wouldn't be a bad idea. The program is only 4 megs.


http://update.mozilla.org/extensions/moreinfo.php?id=154

[Tex Murphy PI]

"Bounty" won't work

Although $500 is a nice "token" or appreciation, I'm sure the the organized crime syndicates are more than willing to pay ten times that amount to be able to exploit a day-zero bug.

A bug that can not only allow them to take over a system, but to commit Identity and account fraud as well.

Still, something is still better than nothing.

[elallred]

Bug Hunters Hall of Fame

$500 is surely too small an amount of money to get the job of serious bounty hunting to go forward. However, many bounty hunters want glory as well. We need to create A Bug Hunters Hall of Fame which would place the name and picture of the successful hunter and a brief description of his/her work. One year in the Hall should be sufficient except for really extraordinary fixes.