Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Future improved disclosure channels #1

Closed
grctest opened this issue Aug 15, 2017 · 1 comment
Closed

Future improved disclosure channels #1

grctest opened this issue Aug 15, 2017 · 1 comment

Comments

@grctest
Copy link

grctest commented Aug 15, 2017

Hey,

Just to let you know in the future that the most optimal effective disclosure route is to contact the admins/mods on slack/irc/telegram/discord rather than the main 'contact' email address which is controlled by a single (but not the only) dev.
There are many trusted devs on Slack who would have paid serious attention to your concerns at the time, likewise I'd have loved to have discussed your research over the last year during the gridcoin community hangouts and would have helped escalate your concerns.

I've raised an issue regarding a lack of clear vulnerability disclosure instructions on the gridcoin website, hopefully we can improve communication between external researchers and gridcoin's developers in the future, learning from this experience.

Thank you for the time you've spent on this valuable research, I hope that you consider joining the Gridcoin community in the future if even to just troll us over your research findings.

Best regards,
CM.

@Kaedo
Copy link
Member

Kaedo commented Aug 15, 2017

Noted for future work.

@Kaedo Kaedo closed this as completed Aug 15, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants