Google: Do you know that if you find a mistake, you can get a reward of lakhs of rupees. Strange as it may sound, but two Indian hackers ,000 dollars, which is almost for finding a serious flaw in the form of Google’s bug bounty. is equal to Rs. Top tech companies offer bug bounties to people who successfully identify bugs in their computer programs or systems. Indian hackers rewarded for finding security flaws in Google’s cloud program projects.

Both Indian hackers name Shriram KL and Shivnesh Ashok Both Indian hackers Shriram KL and Shivnesh Ashok said in a blog post that they were trying to find bugs in Google’s software, especially Google Cloud Platform. They were quite new to the platform and while they were exploring it, they found a problem with one of the features called “SSH-in-browser”. Ashok said in the blog that since this was our first step into Google Cloud, we naturally stumbled upon one of the most popular products, Compute Engine. While searching for its features and how it works, I came across “SSH-in-browser”.

surprised he found this problem so easily He further explained that this feature allows users to access their computer instance like a virtual machine through their web browser using a protocol called SSH. The bug they found could allow someone to control someone else’s virtual machine with just one click, which is a serious problem. He was surprised that he found this problem so easily, as he had just started looking at Google Cloud Platform.

Ashok and Shriram also noticed a bug in another Google cloud platform “Theia”

After researchers reported a flaw in Google’s cloud platform, the search giant improved the way domains are verified by adding a security feature called cross-site request forgery (CSRF) protection to GET endpoints. Fixed the problem by doing . Earlier, Ashok and Shriram had also noticed a bug in another Google cloud platform “Theia”. In their research, they found that the version of Theia they were using was not the latest. He looked for vulnerabilities in this version and found several vulnerabilities, but he found that not all of them could be used to exploit the system.

Google Indian hackersPublished Date

Sat, Jan 21, 2023, 7: 40 PM IST