Re: DDG Tasks Bug Bounty Proposal

[email protected] Tue, 09 May 2017 09:12:21 +0200
Newsgroups gmane.network.freenet.devel
Organization Freenet Project
Message-ID <4321135.fhSMexjlZh@1337h4x0r>
If the USA would consider paying anonymous people money laundering then I'd 
agree that we shouldn't risk this.

Nevertheless you raised an interesting issue which will also be relevant to 
non-anonymous employees, I'd like to say something about it:

On Monday, May 08, 2017 04:57:10 PM Ian wrote:
> There is also a trust issue, since we would probably need to give them
> access to source repos and other things - and it would be irresponsible to
> do that with someone we know nothing about.

For security reasons I don't think any of the core contributors will accept 
giving direct push and/or release privileges to someone who hasn't been on the 
project for years, me included.

If we hire a stranger they will have to commit to their own repository and 
send pull requests just like any other unknown new contributor.

Further, for code quality reasons, payment should only be sent once their code 
has been reviewed and accepted by the core team.
Freenet is a complex project, we cannot blindly merge code from someone who 
hasn't proven to be familiar with the codebase yet. Proving this takes years.
signature.asc (application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=i3xl
-----END PGP SIGNATURE-----