The Register: Facebook wasn’t the first to offer security researchers bounties for reporting vulnerabilities – but the social network reports it paid out $1.5m in 2013 for bug reports, and says it is increasing the amount of cash on offer in the coming year. According to the advertising giant, it received 14,763 reports of suspected flaws last year, an increase of 246 per cent on the 2012 figure.
Unfortunately for Facebook’s security team there were a lot of false positives in there, and only 687 write-ups turned out to be worth paying for – and, thankfully, roughly six per cent were classified as high-severity issues.
