Orel; Check out our patch rewards program<https://www.google.com/about/appsecurity/patch-rewards/>- AOSP is within scope.
Or you could just work on protecting users for the betterment of society by submitting the bug to [email protected] or submitting it to Android Issue tracker <http://code.google.com/p/android/issues> as Jeffrey pointed out. On Wed, May 28, 2014 at 10:20 AM, Jeffrey Walton <[email protected]> wrote: > On Tue, May 27, 2014 at 7:17 PM, Jeffrey Walton <[email protected]> > wrote: > > On Tue, May 27, 2014 at 6:23 PM, orel <[email protected]> wrote: > >> I found a security breach in Android allows violate the privacy, App > can use > >> the camera or microphone in the background, but the user does not know > about > >> it. I have two creative ways how to solve it, I want a small financial > >> reward for effort > > I think Weev is getting ready to start a hedge fund to sell stocks > > short and then drop the 0-days on the company of interest. He may cut > > you in for some of the profits. > > > http://www.activistpost.com/2014/05/trollc-hacktivist-hedge-fund-seeks.html > Apparently, the Washington Legal Foundation feels shorting tech > companies and dropping 0-days in an effort to cause the stock price to > fall is legal on the financial side. Not only that, they claim its > welcomed because it adds more disclosure to the markets. See > https://www.youtube.com/watch?v=BcoilJkd0Ok. > > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to > [email protected]. > Visit this group at > http://groups.google.com/group/android-security-discuss. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/android-security-discuss. For more options, visit https://groups.google.com/d/optout.
