Google Chrome HTTPS Address Bar Spoofing

[dielel]

http://blog.acrossecurity.com/2012/01/google-chrome-https-address-bar.html

[g3orge]

did you know that Google pays the developers who submit security bugs on Chrome?

[gkoberger → g3orge]

Both Chrome and Firefox do. These "bug bounties" have more than paid for themselves. (Disclaimer: I'm a Mozilla developer)

http://ostatic.com/blog/for-mozilla-google-and-bug-hunters-b...

[artursapek → g3orge]

I remember a recent HN thread about that. I think Google has a $500 minimum for anyone who can show them a security flaw/bug.

[Drbble]

Holy cow. Google hosts an open redirection? Amazon shut down its open redirectors 5 years ago.