Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Zorro

(15,740 posts)
Sat Jun 18, 2016, 07:39 PM Jun 2016

Pentagon-sanctioned hackers home in on 138 security gaps

Source: Boston Herald

High-tech hackers brought in by the Pentagon to breach Defense Department websites were able to burrow in and find 138 different security gaps, Defense Secretary Ash Carter said yesterday.

The so-called white-hat hackers were turned loose on five public Pentagon internet pages and were offered various bounties if they could find unique vulnerabilities. The Pentagon says 1,410 hackers took part in the challenge and the first gap was identified just 13 minutes after the hunt began.

Overall, they found 1,189 vulnerabilities, but a review by the Pentagon determined that only 138 were valid and unique.

The experiment cost $150,000. Of that, about half was paid out to the hackers as bounties, including one who received the maximum prize of $15,000 for submitting a number of security gaps. Others received varying amounts, to as low as $100.

Read more: http://www.bostonherald.com/business/business_markets/2016/06/pentagon_sanctioned_hackers_home_in_on_138_security_gaps

5 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Pentagon-sanctioned hackers home in on 138 security gaps (Original Post) Zorro Jun 2016 OP
And this is how Email servers are hacked... nt phazed0 Jun 2016 #1
This message was self-deleted by its author bigworld Jun 2016 #2
You mean they don't regularly do this? MisterFred Jun 2016 #3
IIRC.. .the last company I worked for whistler162 Jun 2016 #4
Indict the Pentagon! Yourma Jun 2016 #5

Response to Zorro (Original post)

MisterFred

(525 posts)
3. You mean they don't regularly do this?
Sun Jun 19, 2016, 08:17 AM
Jun 2016

Not in contest form... but for goodness' sake you'd think looking for vulnerabilities would be standard practice.

 

whistler162

(11,155 posts)
4. IIRC.. .the last company I worked for
Sun Jun 19, 2016, 11:47 AM
Jun 2016

did it once a year tgo meet state requirements. Hired a outside firm to do a vulnerability test.

Latest Discussions»Latest Breaking News»Pentagon-sanctioned hacke...