Microsoft just announced the launch of an Xbox bug bounty program to allow gamers and security researchers to report security vulnerabilities found in the Xbox Live network and services. Qualified Xbox Bounty Program submissions are eligible for bounty payouts ranging from $500 to $20,000 for a remote code execution submitted via a high-quality report with clear and concise proof of concepts (POCs). The bounties will be awarded "at Microsoft’s discretion" based on the severity and impact of the security issue disclosed, as well as the quality of the submission. "Higher awards are possible, at Microsoft’s sole discretion, based on report quality and vulnerability impact," Redmond says. "Researchers who provide submissions that do not qualify for bounty awards may still be eligible for public acknowledgment of their submission leads to a vulnerability fix." Vulnerabilities submitted through the Xbox Bounty Program are required to meet the following criteria to be eligible for a bounty award. To send a submission to the Xbox team you have to use the MSRC Submission portal, with the mention that you'll have to abide by the recommended format in Microsoft's bounty submission guidelines. Additional details on what activities are prohibited under the Xbox Bounty Program and the out of scope vulnerabilities are available on the Coordinated Vulnerability Disclosure throughout the vulnerability reporting process. For vulnerability submissions that are out of the scope of the Xbox Bounty Program, Microsoft may still offer the security researchers public recognition by adding them to the Online Service Acknowledgements page. The bounty amounts for in-scope vulnerabilities based on their severity levels are available in the table. You can find additional information on Microsoft bounty program requirements as well as legal guidelines in the Bounty Terms, the Safe Harbor policy, and the Bounty FAQ. "Since launching in 2002, the Xbox network has enabled millions of users to share their common love of gaming on a safe and secure service," MSRC Program Manager Chloé Brown said. "The bounty program supplements our existing investments in security development and testing to uncover and remediate vulnerabilities that have a direct and demonstrable impact on the security of Xbox customers. For more navigate to OUR FORUM. Huawei overtook Apple to become the world’s second best selling smartphone manufacturer in 2019, according to reports from Strategy Analytics, Counterpoint Research, and Canalys. Over the course of the year, the Chinese manufacturer reportedly shipped around 240 million phones, compared to just under 200 million for Apple. Samsung retained its comfortable lead in the first place, shipping just shy of 300 million devices. Xiaomi and Oppo rounded out the list of the top five manufacturers. The jump is especially surprising given Huawei’s continued presence on the USA’s entity list, which prevents the company from installing Google’s apps and services on its new devices, limiting their appeal outside of China. As a result, Huawei’s main strength was in its home country. Counterpoint Research says China accounted for 60 percent of its sales, allowing its shipments worldwide to increase by 17 percent between 2018 and 2019 — though not in Q4 specifically. However, tensions with the US still had an effect. Canalys notes that 2019 could have been the year that Huawei challenged Samsung for the number one smartphone spot, but ultimately this challenge never materialized. It’s unclear when the situation could change in the future. Huawei has been nipping at Apple’s heels for a while. Back in 2017 Huawei initially overtook Apple to sell more smartphones in the months of June and July, and the following year IDC reported that it had sold more phones than Apple in the second quarter of the year. But in 2019, the company overtook Apple to sell more phones throughout the entire year. Although it lost out on the number two spot for 2019 as a whole, Apple had a very strong fourth quarter as is typical for the company. All three market analyst firms agreed that it managed to outsell Samsung in the last quarter, with sales being driven by the iPhone 11’s lower pricing in particular. Analysts said that Apple’s phone sales were up by between 7 and 11 percent in Q4 2019 compared to the same quarter in 2018. Samsung is expected to rebound this quarter with the launch of its flagship Galaxy S20 series next month. Apple is also likely to receive a boost from the launch of its long-rumored successor to the more affordable iPhone SE, which could be popular in price-sensitive markets like India. Despite individual gains, all three reports agree that the industry sold fewer phones in 2019 than it did in 2018. Counterpoint Research notes that this is the first time the smartphone market has ever declined for two years in a row. With the US’s trade wars still ongoing, and China’s coronavirus scare having potential implications for supply chains, 2020 could be another challenging year. Follow the news on Huawei and lots more on OUR FORUM. After days of frenzied speculation, Britain has allowed a limited role to the Chinese telecommunication giant Huawei in the domestic rollout of the next-generation 5G wireless network. The move, however, represents a symbolic defeat for the campaign by the U.S. to prevent the Chinese tech giant from participating in the deployment of this wireless technology within the geographical jurisdictions of America’s allies. The National Security Council (NSC) of Britain deliberated on two options: either impose a blanket ban on Huawei or impose limits on its market share and the extent of the tech giant’s participation in ‘core’ network areas. The council appears to have opted for the latter option. According to the emerging reports, the NSC has stipulated that Huawei’s telecommunication gear will not be deployed near sensitive geographical locations such as nuclear sites and military bases. Moreover, the Chinese tech giant will be "limited to a minority presence of no more than 35 percent in the periphery of the network, known as the access network ..." Bear in mind that Theresa May’s government considered the imposition of market share caps last year on Huawei vis-à-vis its participation in the UK’s 5G network deployment. However, now that this threshold of 35 percent has been finalized, it will increase the total cost of the next-gen network rollout in the country as a proportion of Huawei’s gear that has already been installed will have to be swapped with that sourced from Ericsson, Nokia, and Samsung. The officials in the U.S are concerned that an active role of Huawei in the UK’s 5G network will compromise the ability of the two nations to securely exchange intelligence. After all, this ability forms one of the cornerstones in the ‘special relationship’ that has existed between the U.S and the UK for decades. UK’s stance on Huawei might also complicate its negotiations with the Trump administration on another thorny issue – digital taxes. As a refresher, efforts are presently underway at the OECD to carve out new tax rules that limit the propensity of tech giants to engage in tax shielding practices. The forum had proposed in October that governments should tear up a century of taxation precedent by allowing individual countries to tax operations in their jurisdiction even if those companies have no physical presence there. Nonetheless, given that UK’s NSC excluded Huawei from participating in the critical portions of the 5G network, the Trump administration might be able to claim partial victory in that its concerns were heeded. Readers should remember that Washington has repeatedly stressed that Huawei provides Beijing a ‘backdoor’ access to sensitive network information. These claims are bolstered by the existence of Chinese laws that require domestic companies to assist Beijing in intelligence collection. Huawei, for its part, has consistently denied providing China’s government any access to sensitive information. Follow this and more on Huawei on OUR FORUM. |
Latest Articles
|