Announcement regarding changes to the LINE Security Bug Bounty Program
The LINE Security Bug Bounty Program was launched on June 2, 2016 with the goal of finding vulnerabilities early on within the LINE messenger app and LINE Corporation websites, to make services safer for our users.
Users have reported vulnerabilities up until now through LINE's own bug bounty platform. However, from November 15, 2019, reports will only be accepted through the HackerOne platform—provided by the company of the same name—in a move to provide users with a higher quality bug bounty program.
New Vulnerability Report Program
- LINE Security Bug Bounty Program on HackerOne: https://hackerone.com/line
- Account registration: https://hackerone.com/sign_up
You will need a HackerOne account to report vulnerabilities. After you complete signup, fill out the form and click on Submit Report to make your report.
The new program will also accept reports in both English and Japanese.
Last day for account registration on our current platform: 11:59 pm on Friday, November 8, 2019 (GMT+9)
Last day for submissions through our current platform: 11:59 pm on Thursday, November 14, 2019 (GMT+9)
New platform is open for report submissions: Friday, November 15, 2019
Complete closing of the current platform: 11:59 pm on Tuesday, December 31, 2019 (GMT+9)
・Users can continue submitting vulnerability reports through the current form (https://bugbounty.linecorp.com/apply) up until November 14, 2019. It will no longer be possible to use this form from the following day on November 15, 2019, and users will need to submit reports through the HackerOne platform (https://hackerone.com/line).
・Reports made through the old platform can still be viewed up until December 31, 2019. Make sure to archive any reports you need for your own records before this date.
・The Hall of Fame page (https://bugbounty.linecorp.com/halloffame) will remain available even after the changeover.
・As before, initial payment of reward money may require some time for tax-related procedures.
・If you have any questions or inquiries after December 31, 2019 regarding reports you made through our current platform, you can contact us at email@example.com