Mastodawn

Noel Lopez Dec 20, 2022

One of the benefits of #Mastodon being #OpenSource: The EU can help make it more secure.

"Awards of up to EUR 5000 are available for finding security vulnerabilities in LibreOffice, LEOS, Mastodon, Odoo and CryptPad, open source solutions used by public services across the European Union. There is a 20% bonus for providing a code fix for the bugs they discover."
https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en
#EU #OpenCollaboration

European Commission's Open Source Programme Office starts bug bounties

Ethical hackers wanted, for fixing bugs in LibreOffice, LEOS, Mastodon, Odoo and CryptPad.

European Commission

Show thread

Simon Phipps Dec 20, 2022

@noellopez
While this originally appeared a good thing (it was a cool hack pioneered by @senficon to get at least some funding for #OpenSource), the fact that 7 years after the inception of FOSSA the EU still hasn't found a way to pay the maintainers to fix the bugs they are paying to have found is a problem.

Show thread

dvdjaco

@webmink @noellopez @senficon
My thoughts exactly. Bug/vulnerability bounties are very much needed, but the EU needs to find other ways to show long term commitment with key #FreeSoftware projects and communities.