From 10d7616b90319d606e86b0d914d82028e3521279 Mon Sep 17 00:00:00 2001 From: anonimal Date: Wed, 29 Nov 2017 07:39:47 +0000 Subject: [PATCH] VRP: add new caveats to Preamble --- VULNERABILITY_RESPONSE_PROCESS.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/VULNERABILITY_RESPONSE_PROCESS.md b/VULNERABILITY_RESPONSE_PROCESS.md index 779d0c8..bc97990 100644 --- a/VULNERABILITY_RESPONSE_PROCESS.md +++ b/VULNERABILITY_RESPONSE_PROCESS.md @@ -9,6 +9,12 @@ 2. As a pro-privacy project we have volunteers running copies of the websites on hidden services on Tor and I2P, as well as on multiple public domains. **The live sites are NOT in the scope of this process; only the code is!** +3. While **Kovri** is in a pre-Alpha release state, HackerOne should not be used for disclosure. All **Kovri** issues should be directed to [GitHub](https://github.com/monero-project/kovri) + +4. Bounty will be released for all projects in Monero XMR only. For more information on how to use Monero, visit the [Monero website](https://getmonero.org) + +5. Bounty will not be available for **Kovri** until **Kovri Beta** is released + ## I. Points of Contact for Security Issues ### Monero (CLI/GUI/Website)