Not logged in » Login
Jul 24 2018

Earn While You Surf the Web with Firefox ASan Nightly

Never shy to explore unknown terrain, Mozilla's browser developers have come up with a new concept that's supposed to help them detect memory errors in C/C++ code using the AddressSanitizer (ASan) tool and remote crash reports. To implement these functions, they've created a new branch of Nightly builds that can be run alongside other Firefox editions. However, the most original aspect is that users willing to assist the developers will be treated like participants of the Firefox bug bounty program (aka Bugzilla).

Firefox ASan Nightly monitors all memory accesses and detects memory errors that attackers can use to inject code, including use-after-free errors and buffer overflows. If ASan finds a vulnerability, it sends a report to the Firefox developers. Users who wish to be rewarded need to include their email address in the configuration settings (about:config) under asanreporter.clientid; they may then be eligible for cash rewards between US-$500 and US-$7,500, depending on the severity of the detected flaw. This option is only available as part of the new browser version and does not appear in regular Nightly builds.

While this may look like a comfortable method to generate extra income by simply surfing the web, it's not exactly easy to become part of the team: Firefox aficionados who'd like to join the effort should be running a desktop or laptop equipped with a Linux-based operating system and at least 16 GB of RAM. A Windows-compatible version is under development and due to appear within the next week or two. For more information, please refer to the official announcement on MDN Web Docs (formerly Mozilla Developer Network) and the terms and conditions laid out in the organization's Client Security Bug Bounty Program.


Comments on this article

No comments yet.

Please Login to leave a comment.


Please login

Please log in with your Fujitsu Partner Account.


» Forgot password

Register now

If you do not have a Fujitsu Partner Account, please register for a new account.

» Register now