{"id":52977,"date":"2019-11-21T00:00:00","date_gmt":"2019-11-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej"},"modified":"2020-02-18T14:00:49","modified_gmt":"2020-02-18T11:00:49","slug":"mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","title":{"rendered":"Mozilla espande il programma di ricompense per la segnalazione di vulnerabilit\u00e0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Azienda Mozilla <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/11\/19\/updates-to-the-mozilla-web-security-bounty-program\/\">ha annunciato<\/a><\/noindex> sull'estensione <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/web-bug-bounty\/\">di un'iniziativa<\/a><\/noindex> per il pagamento di premi monetari per la segnalazione di problemi di sicurezza negli elementi dell'infrastruttura legati allo sviluppo di Firefox. L'importo dei premi per la segnalazione di vulnerabilit\u00e0 sui siti e nei servizi di Mozilla \u00e8 raddoppiato, mentre il premio per la segnalazione di vulnerabilit\u00e0 che possono portare all'esecuzione di codice su <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/bug-bounty\/web-eligible-sites\/#critical-sites\">siti chiave<\/a><\/noindex>, \u00e8 stato portato a 15 mila dollari. <\/p>\n<p>Per la determinazione di un metodo di bypass dell'autenticazione e l'inserimento di codice SQL \u00e8 possibile ricevere una ricompensa di 6 mila dollari, mentre per lo scripting intersito e il CSRF \u2014 5 mila dollari. I siti chiave includono firefox.com\/org, mozilla.com\/org, addons.mozilla.org, getfirefox.com, bugzilla.mozilla.org, search.services.mozilla.com, archive.mozilla.org, download.mozilla.org<br \/>\ne diversi decine di altri siti legati a estensioni, aggiornamenti, download, sincronizzazione e statistiche.<\/p>\n<p>Per <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/bug-bounty\/web-eligible-sites\/#core-sites\">siti di base<\/a><\/noindex> l'importo del premio \u00e8 circa la met\u00e0. I siti di base includono observatory.mozilla.org, getpocket.com, premium.firefox.com, hg.mozilla.org e alcuni servizi interni per sviluppatori.<\/p>\n<p>Rispetto alle condizioni precedentemente in vigore, sono stati aggiunti ai siti e servizi chiave:<\/p>\n<ul>\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla-services\/autograph\">Autograph<\/a><\/noindex> (servizio di firme digitali),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/moz-conduit.readthedocs.io\/en\/latest\/lando-user.html\">Lando<\/a><\/noindex> (servizio di pubblicazione automatica del codice da<br \/>\nPhabricator nei repository), <\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/Phabricator\">Phabricator<\/a><\/noindex> (strumento di gestione del codice utilizzato per la revisione delle modifiche),\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.taskcluster.net\/docs\">Taskcluster<\/a><\/noindex>  (framework per l'esecuzione di attivit\u00e0 che supporta il sistema di integrazione continua e i processi di creazione delle versioni).\n<\/ul>\n<p>Tra i nuovi siti di base ci sono:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49337\">Firefox Monitor<\/a><\/noindex> (monitor.firefox.com),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/mozilla-l10n.github.io\/localizer-documentation\/\">Piattaforma di localizzazione<\/a><\/noindex> (l10n.mozilla.org),\n<li class=\"l\"> Servizio <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/subhub\">Payment Subscription<\/a><\/noindex> (wrapper sopra il sistema di pagamento Stripe),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/subhub\">Firefox Private Network<\/a><\/noindex> (estensione con <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51466\">proxy<\/a><\/noindex> per proteggere il traffico),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/ReleaseEngineering\/Applications\/Ship_It\">Ship It<\/a><\/noindex> (sistema di traduzione delle richieste per la creazione delle versioni),\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/speech-proxy\">Speak To Me<\/a><\/noindex> (sistema di riconoscimento vocale alla base dell'API per il riconoscimento vocale).\n<\/ul>\n<p>Inoltre, \u00e8 possibile <noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/2019\/11\/upcoming-notification-permission-changes-in-firefox-72\/\">segnalare<\/a><\/noindex> l'intenzione di attivare nel rilascio previsto per il 7 gennaio Firefox 72 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50442\">metodi di prevenzione<\/a><\/noindex> con richieste insistenti di fornire ulteriori autorizzazioni al sito. Molti siti abusano della possibilit\u00e0 di richiederle nei browser, principalmente mostrando periodicamente richieste per ricevere notifiche push. L'analisi della telemetria ha mostrato che il 97% di tali richieste viene rifiutato, con il 19% degli utenti che chiude immediatamente la pagina senza premere il pulsante di accettazione o di rifiuto. In Firefox 72, tali richieste saranno bloccate se non \u00e8 stata registrata l'interazione dell'utente con la pagina (clic del mouse o pressione di tasti).<\/p>\n<p>Tra i cambiamenti in arrivo in Firefox 72 spicca anche <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1578377\">l'uso<\/a><\/noindex> il colore di sfondo della pagina corrente per la barra di scorrimento e <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1412438\">l'eliminazione<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/forum\/#!topic\/mozilla.dev.platform\/AyMlrNHYepE\/discussion\">le possibilit\u00e0<\/a><\/noindex> di binding delle chiavi pubbliche (PKP, Public Key Pinning), che consente, tramite l'intestazione HTTP Public-Key-Pins, di specificare esplicitamente quali certificati di autorit\u00e0 di certificazione possono essere utilizzati per un determinato sito. La ragione \u00e8 la scarsa richiesta di questa funzione e il rischio di problemi di compatibilit\u00e0 (supporto PKP <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47466\">interrotto<\/a><\/noindex> in Chrome) e la possibilit\u00e0 di bloccare il proprio sito a causa dell'associazione di chiavi errate o della perdita delle chiavi (ad esempio, cancellazione accidentale o compromissione a causa di un attacco). <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51903\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0435 \u0434\u0435\u043d\u0435\u0436\u043d\u044b\u0445 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Firefox. \u0420\u0430\u0437\u043c\u0435\u0440 \u043f\u0440\u0435\u043c\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Mozilla \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430, \u0430 \u043f\u0440\u0435\u043c\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u043e 15 \u0442\u044b\u0441\u044f\u0447 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52977","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Mozilla \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla amplia il programma di ricompense per la segnalazione di vulnerabilit\u00e0 | ProHoster","description":"La societ\u00e0 Mozilla ha annunciato un'espansione","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 05:36:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:33:29","updated":"2026-01-24 05:36:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/52977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=52977"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/52977\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=52977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=52977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=52977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}