Re: DDG Tasks Bug Bounty Proposal

On Tuesday, May 09, 2017 09:12:21 AM [email protected] wrote:
> On Monday, May 08, 2017 04:57:10 PM Ian wrote:
> > There is also a trust issue, since we would probably need to give them
> > access to source repos and other things - and it would be irresponsible to
> > do that with someone we know nothing about.
> 
> For security reasons I don't think any of the core contributors will accept
> giving direct push and/or release privileges to someone who hasn't been on
> the project for years, me included.
> 
> If we hire a stranger they will have to commit to their own repository and
> send pull requests just like any other unknown new contributor.
> 
> Further, for code quality reasons, payment should only be sent once their
> code has been reviewed and accepted by the core team.
> Freenet is a complex project, we cannot blindly merge code from someone who
> hasn't proven to be familiar with the codebase yet. Proving this takes
> years.

I'm sorry, I wasn't clear enough:

You seemed to say that hiring a non-anonymous person would solve this problem.

I meant to reply that knowing their real name does *not* solve it:
Any new contributor will have to prove their skill by sending PRs for a long 
time, anonymous or non-anonymous. Direct push/release access and payment is 
not an option IMHO.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=CmPP
-----END PGP SIGNATURE-----