monero-project/meta
monero-project/meta
1
0
Fork 0
mirror of https://github.com/monero-project/meta.git synced 2025-01-03 09:29:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

VRP: clarify that both code *and* research are applicable

Browse source
This commit is contained in:
anonimal 2018-01-25 17:48:39 +00:00
parent 5a39ee5991
commit f01d36de29
No known key found for this signature in database
GPG key ID: 66A76ECF914409F1
1 changed files with 7 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
VULNERABILITY_RESPONSE_PROCESS.md
View file

@ -2,14 +2,18 @@
## Preamble (Monero/Kovri) ## Preamble (Monero/Kovri)
1. Researchers/Hackers: while you research/hack, we ask that you please refrain from committing the following: 1. This Vulnerability Response Process and subsequent bounty reward apply to the following:
- Code implementation as seen in the Monero Project GitHub repositories
- Written research from the Monero Research Lab which dictates said code implementation
2. Researchers/Hackers: while you research/hack, we ask that you please refrain from committing the following:
- Denial of Service / Active exploiting against the Monero/Kovri networks - Denial of Service / Active exploiting against the Monero/Kovri networks
- Social Engineering of Monero/Kovri Project staff or contractors - Social Engineering of Monero/Kovri Project staff or contractors
- Any physical or electronic attempts against Monero/Kovri community property and/or data centers - Any physical or electronic attempts against Monero/Kovri community property and/or data centers
2. As a pro-privacy project we have volunteers running copies of the websites on hidden services on Tor and I2P, as well as on multiple public domains. **The live sites are NOT in the scope of this process; only the code is!** 3. As a pro-privacy project we have volunteers running copies of the websites on hidden services on Tor and I2P, as well as on multiple public domains. **The live sites are NOT in the scope of this process; only the code is!**
3. Bounty will be released for all projects in Monero XMR only. For more information on how to use Monero, visit the [Monero website](https://getmonero.org) 4. Bounty will be released for all projects in Monero XMR only. For more information on how to use Monero, visit the [Monero website](https://getmonero.org)
## Preamble (Kovri) ## Preamble (Kovri)