Re: DDG Tasks Bug Bounty Proposal
[email protected] Tue, 09 May 2017 09:12:21 +0200
| Newsgroups | gmane.network.freenet.devel |
|---|---|
| Organization | Freenet Project |
| Message-ID | <4321135.fhSMexjlZh@1337h4x0r> |
If the USA would consider paying anonymous people money laundering then I'd agree that we shouldn't risk this. Nevertheless you raised an interesting issue which will also be relevant to non-anonymous employees, I'd like to say something about it: On Monday, May 08, 2017 04:57:10 PM Ian wrote: > There is also a trust issue, since we would probably need to give them > access to source repos and other things - and it would be irresponsible to > do that with someone we know nothing about. For security reasons I don't think any of the core contributors will accept giving direct push and/or release privileges to someone who hasn't been on the project for years, me included. If we hire a stranger they will have to commit to their own repository and send pull requests just like any other unknown new contributor. Further, for code quality reasons, payment should only be sent once their code has been reviewed and accepted by the core team. Freenet is a complex project, we cannot blindly merge code from someone who hasn't proven to be familiar with the codebase yet. Proving this takes years.
signature.asc
(application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAABCAAGBQJZEWvYAAoJEMtmZ+8tjWt551EP/j7wO9c0yr8reolA/crHWj3/ pQirG4NjH5QyK3MhhmxWnwucf7rf+QT2Lm/BtHY9j8e/HmQoh1RfQdEA5ybTJame ORprcypNquClWvtSGM+/dmksFXZPv4233B0l1jPpGkF92JLaRu+c83ev7rPJ4h75 ppfaEyMc6Z5IfRv2uG9lQO1U8x5cRtBANPwVRqpapb4mbdwQs8dFAPdV8jhsi0y/ AL3hrWViVWRRzUc5eFQ/SkEudujhL+WDk0oa98cv5ghsaoDvujYBB0RtqtX60Brb jg9jjXUYIh5JgXkB615fq4vAje+p0EEZxSeR4u4DC1ej02P6prbUyJ9N3oJNVQMH YwlEf0e/QD+R+duFl++wKpBuU7MTpFQ7uesaELqKl0Ds+6VupaH2SgihqHnRV2fu 0XM1UAwcbjVLV0qcy0dNxN12nOS7/iMJx/y5tXme5Z/5Lz0qagDF8r738gHV2jpt 7F0mVv40Zyof5/m9mx+bz6GxHxCSLuE+59CJybZ/DlG9jOTT6/ec1uiOiJDBSSvo bulJf9XFcXrdGbcr1maeyNy9fkvZO0jhYHMzbLKKFi5nec0xghhBo1mf5Vkzu8fe 4sJFadLmXcEtWM61nN9EmVJHKY5IHOXoesRoUow3zOqP89XILZIK8IQhSXVgU+Gu 32D+B/FQCr6NngH5rjRW =i3xl -----END PGP SIGNATURE-----