SoylentNews

fliptop writes:

If you're a frequent flier and like looking for software bugs, United Airlines may have an offer you can't refuse. While most companies pay monetary rewards,

United Airlines, in keeping with the company's services, has chosen to offer air miles.

"We believe that this program will further bolster our security and allow us to continue to provide excellent service," United says. "If you think you have discovered a potential bug that affects our websites, apps and/or online portals, please let us know. If the submission meets our requirements, we'll gladly reward you for your time and effort."

If a researcher discovers bugs in the system which affect the "confidentiality, integrity and/or availability of customer or company information," through customer-facing websites and third-party programs used by United, they may be eligible for reward. Low-severity rated vulnerabilities, such as cross-site scripting, cross-site request forgery and third-party problems which affect United are worth 50,000 air miles.

Medium- and high-severity attacks will net 250,000 and 1 million miles, respectively. You probably don't want to conduct any research while in flight, though:

The airline says brute-force attacks, code injection on live systems, DDoS attacks, testing on MileagePlus accounts that are not your own and testing on in-flight systems will result in disqualification and possible criminal investigation.