Re: Rewards of Up to $500,000 Offered for OpenBSD Zero-Days (and other dist.)

Hello Marko /Sekeres

I dont mean to start a flame war as it is counterproductive but Idont fully
get what you mean / imply by

>.".. while not requiring from OpenBSD to introduce Code of Conduct"

I think to anyone who has been on the mailing list for a number of years
anyone who has read the project goals
it is clear what the projects goals are and one of the most important
is increase security

users are not in anyway bound to a code of conduct. it is not in the license

based on technical discussions and safeguards and talks about risks bugs
and their mitigations

I don't think any one @openbsd.org would sell the project out

suffice to say that the anyone following the Selective Disclosure Controversies
would understand that the OpenBSD project is does not endorse them
or advocate them.

selling zeroday bugs to anyone and deliberately withholding information from
the developers of the software
is probably the antithesis of what this project stands for.


Regards,

Tom Smyth




On 4 July 2018 at 18:23, Marko Cupać <marko.cupac@mimar.rs> wrote:
> On Wed, 4 Jul 2018 18:06:04 +0200
> Reyk Floeter <reyk@openbsd.org> wrote:
>
>> I hope somebody steps up and donates $500,000 to the OpenBSD
>> foundation instead.
>
> ... while not requiring from OpenBSD to introduce Code od Conduct
>
> :D
>
> --
> Before enlightenment - chop wood, draw water.
> After enlightenment - chop wood, draw water.
>
> Marko Cupać
> https://www.mimar.rs/
>