Re: Trustly PostgreSQL Data Corruption Bug Bounty Program

Поиск
Список
Период
Сортировка
От Simon Riggs
Тема Re: Trustly PostgreSQL Data Corruption Bug Bounty Program
Дата
Msg-id CANP8+jL1h+Fh9FQuzdiHGwdJYrprg4eZp=mJ7F2rcz2rfEY-nA@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Trustly PostgreSQL Data Corruption Bug Bounty Program  (Josh Berkus <josh@agliodbs.com>)
Ответы Re: Trustly PostgreSQL Data Corruption Bug Bounty Program
Список pgsql-hackers
On 24 June 2015 at 19:18, Josh Berkus <josh@agliodbs.com> wrote:
On 06/24/2015 10:15 AM, Joel Jacobson wrote:
> You are most welcome to contact me at joel@trustly.com or by replying
> to this thread, if you have any suggestions on how to improve this
> bug bounty program, or if you have any other feedback in general.

Members of the PostgreSQL Security Team need to be disqualified from
eligibility, of course.

..err... this is for data corruption bugs, not security.

Editing data files by privileged users doesn't count, since it needs to be reproducible.

Thanks Joel, good idea.

--
Simon Riggs                http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

В списке pgsql-hackers по дате отправления: