{"id":52977,"date":"2019-11-21T00:00:00","date_gmt":"2019-11-20T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej"},"modified":"2020-02-18T14:00:49","modified_gmt":"2020-02-18T11:00:49","slug":"mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","title":{"rendered":"Mozilla ut\u00f6kar sitt bel\u00f6ningsprogram f\u00f6r att avsl\u00f6ja s\u00e5rbarheter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>F\u00f6retaget Mozilla <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2019\/11\/19\/updates-to-the-mozilla-web-security-bounty-program\/\">tillk\u00e4nnagav<\/a><\/noindex> om utvidgningen <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/web-bug-bounty\/\">initiativ<\/a><\/noindex> f\u00f6r utbetalning av monet\u00e4ra bel\u00f6ningar f\u00f6r att uppt\u00e4cka s\u00e4kerhetsproblem i infrastrukturelement relaterade till utvecklingen av Firefox. Beloppen f\u00f6r bel\u00f6ningar f\u00f6r att avsl\u00f6ja s\u00e5rbarheter p\u00e5 webbplatser och tj\u00e4nster tillh\u00f6rande Mozilla har f\u00f6rdubblats, och bel\u00f6ningen f\u00f6r att uppt\u00e4cka s\u00e5rbarheter som kan leda till kodexekvering p\u00e5 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/bug-bounty\/web-eligible-sites\/#critical-sites\">nyckelsajter<\/a><\/noindex>, har h\u00f6jts till 15 000 dollar. <\/p>\n<p>F\u00f6r att identifiera metoder f\u00f6r att kringg\u00e5 autentisering och infoga SQL-kod kan man f\u00e5 en bel\u00f6ning p\u00e5 6 000 dollar, medan f\u00f6r cross-site scripting och CSRF \u2014 5 000 dollar. Nyckelsajter inkluderar firefox.com\/org, mozilla.com\/org, addons.mozilla.org, getfirefox.com, bugzilla.mozilla.org, search.services.mozilla.com, archive.mozilla.org, download.mozilla.org.<br \/>\noch ytterligare ett dussin webbplatser relaterade till till\u00e4gg, uppdateringar, nedladdning, synkronisering och statistik.<\/p>\n<p>F\u00f6r <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mozilla.org\/en-US\/security\/bug-bounty\/web-eligible-sites\/#core-sites\">grundl\u00e4ggande sajter<\/a><\/noindex> beloppet f\u00f6r bel\u00f6ningarna \u00e4r ungef\u00e4r h\u00e4lften s\u00e5 mycket. De grundl\u00e4ggande sajterna inkluderar observatory.mozilla.org, getpocket.com, premium.firefox.com, hg.mozilla.org och vissa interna tj\u00e4nster f\u00f6r utvecklare.<\/p>\n<p>J\u00e4mf\u00f6rt med de tidigare villkoren har f\u00f6ljande nyckelsajter och tj\u00e4nster lagts till:<\/p>\n<ul>\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla-services\/autograph\">Autograph<\/a><\/noindex> (digital signaturstj\u00e4nst),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/moz-conduit.readthedocs.io\/en\/latest\/lando-user.html\">Lando<\/a><\/noindex> (tj\u00e4nst f\u00f6r automatisk koddistribution fr\u00e5n<br \/>\nPhabricator till arkiv), <\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/Phabricator\">Phabricator<\/a><\/noindex> (verktyg f\u00f6r kodhantering som anv\u00e4nds f\u00f6r att granska \u00e4ndringar),\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/docs.taskcluster.net\/docs\">Taskcluster<\/a><\/noindex>  (ramverk f\u00f6r att k\u00f6ra uppgifter som st\u00f6der systemet f\u00f6r kontinuerlig integration och release-processer).\n<\/ul>\n<p>Nya grundl\u00e4ggande sajter inkluderar:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49337\">Firefox Monitor<\/a><\/noindex> (monitor.firefox.com),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/mozilla-l10n.github.io\/localizer-documentation\/\">Lokaliseringsplattform<\/a><\/noindex> (l10n.mozilla.org),\n<li class=\"l\"> Tj\u00e4nsten <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/subhub\">Payment Subscription<\/a><\/noindex> (gr\u00e4nssnitt \u00f6ver betalningssystemet Stripe),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/subhub\">Firefox Private Network<\/a><\/noindex> (till\u00e4gg med <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51466\">proxy<\/a><\/noindex> f\u00f6r att skydda trafik),\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/ReleaseEngineering\/Applications\/Ship_It\">Ship It<\/a><\/noindex> (system f\u00f6r att \u00f6vers\u00e4tta f\u00f6rfr\u00e5gningar f\u00f6r att skapa releaser),\n<li class=\"l\">  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/speech-proxy\">Speak To Me<\/a><\/noindex> (taligenk\u00e4nningsteknologi som ligger till grund f\u00f6r Speech Recognition API).\n<\/ul>\n<p>Dessutom kan man <noindex><a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/2019\/11\/upcoming-notification-permission-changes-in-firefox-72\/\">notera<\/a><\/noindex> planera att aktivera i den planerade releasen av Firefox 72 den 7 januari <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50442\">metoder f\u00f6r att motverka<\/a><\/noindex> med envisande f\u00f6rfr\u00e5gningar om att ge webbplatsen ytterligare r\u00e4ttigheter. M\u00e5nga webbplatser missbrukar den funktion i webbl\u00e4sare som g\u00f6r det m\u00f6jligt att beg\u00e4ra \u00e5tkomstr\u00e4ttigheter, framf\u00f6r allt genom att periodiskt visa f\u00f6rfr\u00e5gningar om att ta emot push-notiser. Analysen av telemetri har visat att 97% av s\u00e5dana f\u00f6rfr\u00e5gningar avvisas, inklusive i 19% av fallen, d\u00e4r anv\u00e4ndaren st\u00e4nger sidan direkt utan att klicka p\u00e5 knappen f\u00f6r att godk\u00e4nna eller avvisa. I Firefox 72 kommer s\u00e5dana f\u00f6rfr\u00e5gningar att blockeras om det inte registreras n\u00e5gon anv\u00e4ndarinteraktion med sidan (musklik eller tangenttryckning).<\/p>\n<p>Bland de kommande f\u00f6r\u00e4ndringarna i Firefox 72 framh\u00e4vs \u00e4ven <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1578377\">anv\u00e4ndningen av<\/a><\/noindex> bakgrundsf\u00e4rgen p\u00e5 den aktuella sidan f\u00f6r rullningsf\u00e4ltet och <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1412438\">borttagning av<\/a><\/noindex> <noindex><a rel=\"nofollow\" href=\"https:\/\/groups.google.com\/forum\/#!topic\/mozilla.dev.platform\/AyMlrNHYepE\/discussion\">m\u00f6jligheten till<\/a><\/noindex> bindning av \u00f6ppna nycklar (PKP, Public Key Pinning), vilket g\u00f6r det m\u00f6jligt att med hj\u00e4lp av HTTP-headern Public-Key-Pins tydligt ange vilka certifikat fr\u00e5n certifieringsmyndigheter som f\u00e5r anv\u00e4ndas f\u00f6r en viss webbplats. Anledningen anges vara den l\u00e5ga efterfr\u00e5gan p\u00e5 denna funktion, risken f\u00f6r kompatibilitetsproblem (PKP-st\u00f6d <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47466\">avslutades<\/a><\/noindex> i Chrome) och risken att blockera sin egen webbplats p\u00e5 grund av felaktig nyckelbindning eller f\u00f6rlust av nycklar (till exempel av misstag radera eller kompromettering som resultat av hackning). <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51903\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b \u043f\u043e \u0432\u044b\u043f\u043b\u0430\u0442\u0435 \u0434\u0435\u043d\u0435\u0436\u043d\u044b\u0445 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 Firefox. \u0420\u0430\u0437\u043c\u0435\u0440 \u043f\u0440\u0435\u043c\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Mozilla \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430, \u0430 \u043f\u0440\u0435\u043c\u0438\u044f \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0434\u043e 15 \u0442\u044b\u0441\u044f\u0447 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52977","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Mozilla \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-20T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla ut\u00f6kar programmet f\u00f6r bel\u00f6ningar f\u00f6r att uppt\u00e4cka s\u00e5rbarheter | ProHoster","description":"F\u00f6retaget Mozilla har meddelat om utvidgningen av","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u044b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-rasshiryaet-programmu-vyplaty-voznagrazhdenij-za-vyyavlenie-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-20T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 05:36:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:33:29","updated":"2026-01-24 05:36:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/52977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=52977"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/52977\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=52977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=52977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=52977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}