You might have seen that already before when we had some discussion
about the FOSSA project, but as I was just commenting a policy paper
which was mentioning bug bounties, I thought it is a good to remind you
about this write-up by the Apache Software Foundation:
Chapter "Bug Bounties - a Panacea?" in
https://blogs.apache.org/foundation/entry/free_and_open_source_security
Would be interested what people here think about that.
Best Regards,
Matthias
--
Matthias Kirschner - President - Free Software Foundation Europe
Schönhauser Allee 6/7, 10119 Berlin, Germany | t +49-30-27595290
Registered at Amtsgericht Hamburg, VR 17030 | (fsfe.org/join)
Contact (fsfe.org/about/kirschner) - Weblog (k7r.eu/blog.html)
_______________________________________________
Discussion mailing list
Discussion@lists.fsfe.org
https://lists.fsfe.org/mailman/listinfo/discussion