It's never enough when it comes to look for vulnerabilities in a system and to improve its security, one of the best attempts is what Google has been doing with those programs that encourage hackers and developers to identify bugs in their code, especially those that could be used as the basis for a vulnerability.
There are some recent episodes that continue to emphasize the need for Google's Project Zero (already an expert in these conflicts), which just today announced another contest called Project Zero Prize that could award up to U.S. dollar 200.000 to the winner of the same. The Project Zero team is making use of the Android issue log for the Project Zero Prize, as this contest focuses on the Android operating system.
The team also encourages participants to share all those bugs they find, rather than waiting for a whole chain is discovered complete bugs. Another of the bets that Project Zero is introducing is that it be fully and publicly explained how an "exploit" works. The team maintains that it hopes that by introducing this level of transparency, it would help improve the public's understanding of how an exploit works and how successful it is.
Other important information that Google hopes to elicit from the contest is what parts of the code are commonly attacked or used for exploits, and how current security measures are bypassed. Knowing this information will help mitigate potential weaknesses in the Android code.
To win that $ 200.000, hackers will need to present a chain of bugs or vulnerability that allows the remote code execution on multiple devices just by knowing the phone number and email address. The second prize will be $ 100.000 and the rest of the tickets could stay at $ 50.000.
El contest period is 6 months in which hackers will have to show how that code is remotely executed. The only condition is that this presentation must be carried out on a Nexus 6P and a Nexus 5X, which are currently updated to the latest version of Android, 7.0 Nougat.