News for hackers. Stuff that matters.
Re:Announcing the Windows Bounty Program by skrebbel on Wednesday July 26, 2017 @04:17PM (#14859856)
On the other side, e.g. Egor Homakov hacked GitHub a few times through vulnerabilities in Rails. GitHub paid him bounties anyway. I'm no expert, but it appears to me that at times it does work, just not always.
Re:Announcing the Windows Bounty Program by sand500 on Wednesday July 26, 2017 @10:03PM (#14862101)
Is github itself open source tho?
Re:Announcing the Windows Bounty Program by skrebbel on Thursday July 27, 2017 @09:34AM (#14865069)
No, but a company paid a bounty for a leak in Rails, which is open source. Isn't that what this topic was about?
Re:Announcing the Windows Bounty Program by jtl999 on Wednesday July 26, 2017 @11:42PM (#14862533)
Well I think the source code is included (since it's Ruby, but encrypted) with the Github Enterprise image. But that's "source code available", not "open source" (ie, under a copyleft license)
Re:Announcing the Windows Bounty Program by cyphar on Thursday July 27, 2017 @01:12AM (#14862859)
> But that's "source code available", not "open source" (ie, under a copyleft license)

It's proprietary. Also, there are many free software (or "open source" if you prefer) licenses that are not copyleft. MIT, Apache, Revised BSD, zlib, etc are all examples.

Re:Announcing the Windows Bounty Program by Gaelan on Thursday July 27, 2017 @01:01AM (#14862828)
Encrypted with a widely known (people have blogged it) key.