Hello 👋 I run a security community that finds and fixes vulnerabili

<a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/us

Seems like this got moved to <a class="issue-link js-issue-link" data-error-text="Fail

<a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/us

Responsible disclosure policy about ontrack HOT 5 CLOSED

inoda commented on August 23, 2024

Responsible disclosure policy

from ontrack.

Comments (5)

inoda commented on August 23, 2024

@JamieSlome Feel free to just share the issue here.

from ontrack.

JamieSlome commented on August 23, 2024

@inoda - sure, both issues can be found here:

https://huntr.dev/bounties/31284e3a-ed7b-4896-817d-8d340f4d3862/
https://huntr.dev/bounties/dbbf87f0-d77b-4b1b-a28f-6d8ef424e8f0/

Both are currently private and only accessible by you 👍

from ontrack.

inoda commented on August 23, 2024

@JamieSlome Can you just share the issue here publicly? I understand this is a mechanism to get adoption for your site but I'm not interested in making an account

from ontrack.

inoda commented on August 23, 2024

Seems like this got moved to #82

from ontrack.

JamieSlome commented on August 23, 2024

@inoda - I have made both reports public at the same URLs.

We do not make reports private for adoption, but purely because many maintainers don't want reports public by default. We allow maintainers to access reports using magic URLs, where sign-up is not required at all. This is why we first request an e-mail, so we can send a magic URL to view the reports 👍

from ontrack.

Recommend Projects