{"id":52977,"date":"2019-11-21T00:00:00","date_gmt":"2019-11-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej"},"modified":"2020-02-18T14:00:49","modified_gmt":"2020-02-18T11:00:49","slug":"mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","title":{"rendered":"Mozilla ampl\u00eda su programa de recompensas por la detecci\u00f3n de vulnerabilidades","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La compa\u00f1\u00eda Mozilla <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/11\/19\/updates-to-the-mozilla-web-security-bounty-program\/\">anunci\u00f3<\/a><\/noindex> sobre la expansi\u00f3n <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/web-bug-bounty\/\">de la iniciativa<\/a><\/noindex> en cuanto al pago de recompensas monetarias por la identificaci\u00f3n de problemas de seguridad en los elementos de infraestructura relacionados con el desarrollo de Firefox. El tama\u00f1o de las recompensas por la detecci\u00f3n de vulnerabilidades en sitios web y servicios de Mozilla se ha duplicado, y la recompensa por identificar vulnerabilidades que pueden conducir a la ejecuci\u00f3n de c\u00f3digo en <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/bug-bounty\/web-eligible-sites\/#critical-sites\">sitios clave<\/a><\/noindex>, se ha elevado a 15 mil d\u00f3lares. <\/p>\n<p>Por identificar un m\u00e9todo para eludir la autenticaci\u00f3n y la inyecci\u00f3n de c\u00f3digo SQL, se puede recibir una recompensa de 6 mil d\u00f3lares, mientras que por el scripting entre sitios y CSRF \u2014 5 mil d\u00f3lares. Los sitios clave incluyen firefox.com\/org, mozilla.com\/org, addons.mozilla.org, getfirefox.com, bugzilla.mozilla.org, search.services.mozilla.com, archive.mozilla.org, download.mozilla.org.<br \/>\ny otras varias decenas de sitios relacionados con complementos, actualizaciones, descargas, sincronizaci\u00f3n y estad\u00edsticas.<\/p>\n<p>Para <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/bug-bounty\/web-eligible-sites\/#core-sites\">sitios b\u00e1sicos<\/a><\/noindex> tienen recompensas aproximadamente dos veces menores. Los sitios b\u00e1sicos incluyen observatory.mozilla.org, getpocket.com, premium.firefox.com, hg.mozilla.org y algunos servicios internos para desarrolladores.<\/p>\n<p>En comparaci\u00f3n con las condiciones anteriores, se han a\u00f1adido a la lista de sitios y servicios clave:<\/p>\n<ul>\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla-services\/autograph\">Autograph<\/a><\/noindex> (servicio de firmas digitales),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/moz-conduit.readthedocs.io\/en\/latest\/lando-user.html\">Lando<\/a><\/noindex> (servicio de despliegue autom\u00e1tico de c\u00f3digo desde<br \/>\nPhabricator en los repositorios), <\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/Phabricator\">Phabricator<\/a><\/noindex> (herramienta de gesti\u00f3n de c\u00f3digo utilizada para la revisi\u00f3n de cambios),\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.taskcluster.net\/docs\">Taskcluster<\/a><\/noindex>  (framework para la ejecuci\u00f3n de tareas, que soporta un sistema de integraci\u00f3n continua y procesos de creaci\u00f3n de versiones).\n<\/ul>\n<p>Entre los nuevos sitios b\u00e1sicos se destacan:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49337\">Firefox Monitor<\/a><\/noindex> (monitor.firefox.com),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/mozilla-l10n.github.io\/localizer-documentation\/\">Plataforma de localizaci\u00f3n<\/a><\/noindex> (l10n.mozilla.org),\n<li class=\"l\"> El servicio <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/subhub\">Payment Subscription<\/a><\/noindex> (capa sobre el sistema de pago Stripe),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/subhub\">Firefox Private Network<\/a><\/noindex> (extension para <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51466\">proxy<\/a><\/noindex> proteger el tr\u00e1fico),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/ReleaseEngineering\/Applications\/Ship_It\">Ship It<\/a><\/noindex> (sistema de transmisi\u00f3n de solicitudes para la creaci\u00f3n de versiones),\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/speech-proxy\">Speak To Me<\/a><\/noindex> (sistema de reconocimiento de voz, que sustenta la API de Reconocimiento de Voz).\n<\/ul>\n<p>Adem\u00e1s, se puede <noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/2019\/11\/upcoming-notification-permission-changes-in-firefox-72\/\">marcar<\/a><\/noindex> prever la activaci\u00f3n en la versi\u00f3n planificada del 7 de enero de Firefox 72 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50442\">m\u00e9todos de lucha<\/a><\/noindex> con solicitudes persistentes para otorgar al sitio m\u00e1s permisos. Muchos sitios abusan de la funci\u00f3n que ofrecen los navegadores para solicitar permisos, principalmente al mostrar peri\u00f3dicamente solicitudes para recibir notificaciones push. El an\u00e1lisis de la telemetr\u00eda mostr\u00f3 que el 97% de estas solicitudes son rechazadas, incluyendo en el 19% de los casos donde el usuario cierra la p\u00e1gina sin presionar el bot\u00f3n de aceptaci\u00f3n o rechazo. En Firefox 72, estas solicitudes se bloquear\u00e1n si no se ha registrado la interacci\u00f3n del usuario con la p\u00e1gina (clic del mouse o pulsaci\u00f3n de teclas).<\/p>\n<p>Entre los pr\u00f3ximos cambios en Firefox 72 tambi\u00e9n se destaca <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1578377\">uso de<\/a><\/noindex> el color de fondo de la p\u00e1gina actual para la barra de desplazamiento y <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1412438\">eliminaci\u00f3n<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/forum\/#!topic\/mozilla.dev.platform\/AyMlrNHYepE\/discussion\">capacidad<\/a><\/noindex> de la vinculaci\u00f3n de claves p\u00fablicas (PKP, Public Key Pinning), que permite determinar expl\u00edcitamente, mediante el encabezado HTTP Public-Key-Pins, qu\u00e9 certificados de qu\u00e9 autoridades certificadoras son permitidos para un sitio determinado. Se menciona como motivo la baja demanda de esta funci\u00f3n, el riesgo de problemas de compatibilidad (soporte de PKP <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47466\">se ha interrumpido<\/a><\/noindex> en Chrome) y la posibilidad de bloquear el propio sitio debido a una vinculaci\u00f3n incorrecta de claves o p\u00e9rdida de claves (por ejemplo, eliminaci\u00f3n accidental o compromiso como resultado de un ataque). <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fuente: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51903\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0435 \u0434\u0435\u043d\u0435\u0436\u043d\u044b\u0445 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Firefox. \u0420\u0430\u0437\u043c\u0435\u0440 \u043f\u0440\u0435\u043c\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Mozilla \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430, \u0430 \u043f\u0440\u0435\u043c\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u043e 15 \u0442\u044b\u0441\u044f\u0447 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52977","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/es\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Mozilla \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/es\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla ampl\u00eda el programa de recompensas por la identificaci\u00f3n de vulnerabilidades | ProHoster","description":"La empresa Mozilla anunci\u00f3 la expansi\u00f3n de","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 05:36:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:33:29","updated":"2026-01-24 05:36:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/52977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=52977"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/52977\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=52977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=52977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=52977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}