Path: csiph.com!3.us.feeder.erje.net!feeder.erje.net!news.linkpendium.com!news.linkpendium.com!panix!usenet.stanford.edu!not-for-mail
From: Fred Kiefer <fredkiefer@gmx.de>
Newsgroups: gnu.gnustep.bug
Subject: Re: Query
Date: Fri, 24 Jan 2020 18:20:40 +0100
Lines: 26
Approved: bug-gnustep@gnu.org
Message-ID: <mailman.71.1579886453.2185.bug-gnustep@gnu.org>
References: <CANvtN5HZ56GATvf3aqDdU1AnErujR0fc-nigk7-90q0KjCYVcg@mail.gmail.com> <C94F46E5-4773-4823-B32C-6577B1569441@gmx.de>
NNTP-Posting-Host: lists.gnu.org
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Cc: bug-gnustep@gnu.org
To: Ronak Nahar <naharronak@gmail.com>
Envelope-to: bug-gnustep@gnu.org
In-Reply-To: <CANvtN5HZ56GATvf3aqDdU1AnErujR0fc-nigk7-90q0KjCYVcg@mail.gmail.com>
Precedence: list
Xref: csiph.com gnu.gnustep.bug:4364

Dear Ronak,

I am terribly sorry but we are a Free Software project with very little =
funding so there is no bug bounty and the closest we have got to a hall =
of fame is our contributors page =
(http://www.gnustep.org/developers/whoiswho.html). Vulnerabilities =
should just like any other bugs be reported on our Savannah page =
(http://savannah.gnu.org/projects/gnustep/) or if you prefer on =
https://github.com/gnustep. Or if all of this is too much hassle for =
you, just write a mail to this list or to me in person.

Hope this helps,
Fred

PS: I looked at your LinkedIn page and your record so far is impressive.

> Am 24.01.2020 um 13:59 schrieb Ronak Nahar <naharronak@gmail.com>:
>=20
> I'm a security researcher and I had found few vulnerabilities on your =
domain, do you have any bug bounty or hall of fame for reporting a =
vulnerability. How do I report it?
>=20
> Regards,
> Ronak Nahar