Re: Trustly PostgreSQL Data Corruption Bug Bounty Program

Поиск
Список
Период
Сортировка
От Simon Riggs
Тема Re: Trustly PostgreSQL Data Corruption Bug Bounty Program
Дата
Msg-id CANP8+jL1h+Fh9FQuzdiHGwdJYrprg4eZp=mJ7F2rcz2rfEY-nA@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Trustly PostgreSQL Data Corruption Bug Bounty Program  (Josh Berkus <josh@agliodbs.com>)
Ответы Re: Trustly PostgreSQL Data Corruption Bug Bounty Program
Список pgsql-hackers
On 24 June 2015 at 19:18, Josh Berkus <josh@agliodbs.com> wrote:
On 06/24/2015 10:15 AM, Joel Jacobson wrote:
> You are most welcome to contact me at joel@trustly.com or by replying
> to this thread, if you have any suggestions on how to improve this
> bug bounty program, or if you have any other feedback in general.

Members of the PostgreSQL Security Team need to be disqualified from
eligibility, of course.

..err... this is for data corruption bugs, not security.

Editing data files by privileged users doesn't count, since it needs to be reproducible.

Thanks Joel, good idea.

--
Simon Riggs                http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Alvaro Herrera
Дата:
Сообщение: Re: Add CINE for ALTER TABLE ... ADD COLUMN
Следующее
От: Peter Eisentraut
Дата:
Сообщение: Re: Should we back-patch SSL renegotiation fixes?