Japanese hacker earns $13,174 for reporting Google security holes(d.hatena.ne.jp)
d.hatena.ne.jp
Japanese hacker earns $13,174 for reporting Google security holes
http://d.hatena.ne.jp/masatokinugawa/20110207/google_security
6 comments
Do folks want details? I'll translate if there is interest, but have some real work to do first.
And here you go:
http://www.pastie.org/1536256
P.S. If I were still doing this professionally, I would have been more careful on the editing and y'all would have been more careful on paying the $200 to $300 promptly. (The sky is the limit on translation if you have a high-value high-difficulty niche, and software security counts for both.)
http://www.pastie.org/1536256
P.S. If I were still doing this professionally, I would have been more careful on the editing and y'all would have been more careful on paying the $200 to $300 promptly. (The sky is the limit on translation if you have a high-value high-difficulty niche, and software security counts for both.)
[deleted]
At that rate, one would almost be tempted to do it full time. (That is 2 ~ 4 months of salary, depending on his seniority.)
Are Japanese salaries really that low?
Almost makes it worth outsourcing at the price.
Almost makes it worth outsourcing at the price.
Yes, they're really low. Starting base salaries for programmers and technical workers in general in "regular" Japanese companies are in average $3M yen (=~ U$36k) with very little variance.
Salaries go up very slowly (but surely) and most engineers and developers will eventually reach a plateau under U$100k. Unlike US companies, there's no way you'll ever earn more than that without changing to management. On the other hand, most companies pay overtime and you have job security.
Exceptions are Japanese financial companies and foreign companies. They tend to pay much more than regular Japanese companies. Still, the only companies that pay on par with US companies are foreign banks and securities houses.
I think people underestimate how good it is to be in US if you're a software developer or IT professional in general.
Salaries go up very slowly (but surely) and most engineers and developers will eventually reach a plateau under U$100k. Unlike US companies, there's no way you'll ever earn more than that without changing to management. On the other hand, most companies pay overtime and you have job security.
Exceptions are Japanese financial companies and foreign companies. They tend to pay much more than regular Japanese companies. Still, the only companies that pay on par with US companies are foreign banks and securities houses.
I think people underestimate how good it is to be in US if you're a software developer or IT professional in general.
Low, yes. But you don't have to worry about going bankrupt if you get sick or laid off, I'd imagine.
Japanese salaries for engineers are really, really low compared to American salaries. In Nagoya, the well-known algorithm is about "age times 100k yen", so a 30 year old engineer makes on the order of $36.5k. Opportunities for improving this based on demonstrable ability are very limited when working for Japanese companies. (I hear there are some better options in Tokyo, particularly at foreign companies. Still, published average wages for one of the world's most expensive cities would seem substandard for virtually any American metropolis.)
I've been doing business with some companies in Tokyo recently, and I've come to realize that Nagoya is kind of an anomaly.
Tokyo can command about half-again what we get paid here in Nagoya. Although, that's still well below the average in America, I think.
Also, when looking at those salary rates, you have to make sure to look at SEs, not Programmers -- as there's a huge wage difference between the two (And you and I are definitely not mere programmers ;)
This site is really great for getting good salary info: http://nensyu-labo.com/
Here's the SE division: http://nensyu-labo.com/syokugyou_se.htm 平均年収：547.0万円 (does not include bonus)
And here's a run of the mill programmer http://nensyu-labo.com/syokugyou_programer.htm 平均年収：399.0万円 (does not include bonus)
Tokyo can command about half-again what we get paid here in Nagoya. Although, that's still well below the average in America, I think.
Also, when looking at those salary rates, you have to make sure to look at SEs, not Programmers -- as there's a huge wage difference between the two (And you and I are definitely not mere programmers ;)
This site is really great for getting good salary info: http://nensyu-labo.com/
Here's the SE division: http://nensyu-labo.com/syokugyou_se.htm 平均年収：547.0万円 (does not include bonus)
And here's a run of the mill programmer http://nensyu-labo.com/syokugyou_programer.htm 平均年収：399.0万円 (does not include bonus)
Average salary in the US is around 50k
If you've been paying attention to Japan, that's allegedly one of their major problems right now. Young people cannot make decent wages or land job security, or anything else to encourage them to follow the traditional route, because compensation is being assigned largely based on seniority and the seniors are not relinquishing their positions.
Russian gets ~20k$ http://blog.quintura.com/2011/01/13/russian-sergey-glazunov-...
I'd be curious how many vulnerabilities he found that followed those three patterns. $13k is actually a lot to earn from the program (the average payout I've received per accepted vulnerability is ~$666). Regardless, those are some very nice finds. :)
English version:
http://translate.google.com/translate?js=n&prev=_t&h...
http://translate.google.com/translate?js=n&prev=_t&h...
I'm pretty surprised that Google was allowing such blatantly obvious XSS attack vectors.