Yahoo reveals a new vulnerability reporting policy with rewards of up to $15,000

Yahoo revealed today that it will dole out rewards of up to $15,000 (and starting from $150) to individuals and firms that inform the company of bugs and vulnerabilities classified as new, unique and/or high-risk issues, as part of an updated vulnerability reporting policy.

This is a huge change from what Yahoo has been giving to researchers who have discovered bugs and reported them to the company: a t-shirt. Just a few days ago, Graham Cluley reported that researchers at High-Tech Bridge were rewarded with a $12.50 voucher to buy a corporate t-shirt.