A bounty for Vista bugs

If you've discovered code that creates a security vulnerability in Microsoft's newest operating system Vista, you could be rewarded with some big bucks. VeriSign iDefense Labs is launching another bounty program, this time offering $12,000 for bugs in both Vista and Internet Explorer. While the security vendor wouldn't comment on expectations for bug contributions, it's ready to pay the first six bug finders $8,000, with a bonus payment of $2,000 to $4,000 if the contributor also produces a working exploit code for the found bug. VeriSign is hoping that the program encourages hackers to disclose bugs instead of using them but considering that a Vista exploit can fetch far more on the black market, the company's bounty might be a surprisingly hard sell. The bounty program runs through March.

For more on the Vista bug bounty effort:
- check out the news at TechWeb