United Encourages Hackers to Find Flaws in Network, Offers Million Mile “Bug Bounty”

Hackers are invited to point out vulnerabilities in United’s computer networks in exchange for up to one million miles.

United Airlines is using its MileagePlus program to help boost the security of its computer networks. Forbes reports that in exchange for alerting United to flaws in its cyber security measures, industrious hackers will be rewarded with up to one million frequent flyer miles.

The more severe the flaw, the more hackers can earn from identifying them. Hackers who discover very serious security flaws could earn up to one million miles, while those who report less serious bugs in the airline’s mobile network will receive between 50,000 and 250,000 miles.

United is not the first company to encourage hackers to seek out and identify potential cyber security issues, but it is believed to be the first airline to pay so-called “bug bounties” in frequent flyer miles.

One important caveat to this initiative is an absolute ban on probing in-flight computer systems for security flaws. The airline has warned participants that onboard wireless internet, in-flight entertainment systems and avionics are strictly hands-off. United says hackers violating this provision will be banned from the program and will face “possible criminal and/or legal investigation.”

The airline does not want a repeat of an April incident when United barred a Security analyst from flying after he tweeted about flight-sensitive cyber security issues and implied that he might attempt to interfere with flight-critical systems, including the EICAS — “engine-indicating and crew-alerting system” — and a system that controls deployment of the plane’s emergency oxygen masks.

[Photo: iStock]