Uber-bug-bounty

Uber, the on-demand ridesharing company is celebrating 1st Anniversary of its Bug Bounty Programme. The bug bounty program works with security researchers all over the world to fix bugs, even when they don’t directly impact our users. We appreciate the ongoing contributions of the 6 researchers in India and were happy to reward them for their excellent report.

In last one year, During the past 12 months, Uber has paid more than $860,000 USD to researchers all over the world for helping us improve the security of our products and services! More than 500 security researchers around the world participated in our bug bounty program. Uber Bug BountyThe following 26 countries will be recognized for being home to at least one of our top 50 researchers (in alphabetical order):  Australia, Bangladesh, Belarus, Belgium, Brazil, Bulgaria, Canada, China, Egypt, Finland, France, India, Israel, the Netherlands, Nigeria, Pakistan, Poland, Portugal, Russia, Sweden, Taiwan, Turkey, Ukraine, the United Kingdom, the United States, and Vietnam.

In this Bug Bounty, 6 researchers from India have made it in the top 50 list for the year, here are their details

Metrics and Milestones

Here are some key updates on where the program currently stands:

  • Uber has paid researchers more than $860,000 USD since public launch in 2016.
  • During the past year, security researchers helped uber identify and fix more than 500 bugs across Uber’s portfolio of products and services.
  • Our Signal to Noise Ratio (SNR) improved by 30% since August 2016. Uber’s SNR is now 1:5.

Remarkable Bugs

  • Privilege escalation in uSSH
  • SQLi in vendor product
  • Ride for free on Uber

Follow us on twitter for more news and updates.

Fell in love with Android OS from the day I bought my first Smartphone in 2013. A budding Android Developer. Love to write about Android, Tech, and Smartphones. Technology enthusiast addicted to my smartphone, I love clicking photos with my smartphone, traveling and listening to music. Currently using a OnePlus 6T and Ticwatch S.