Re:CopyFail was not disclosed to Gentoo developer
by leni536 on Friday May 01, 2026 @07:43AM
(#47973642)
This seems to be sloppy wording, with the intent of "we only offer the bounty under these terms". Maybe my interpretation is too charitable.
[ Parent
| on HN ]
Re:CopyFail was not disclosed to Gentoo developer
by marshray on Friday May 01, 2026 @08:14PM
(#47981992)
I do not speak for MSFT, but last time I spoke with MSRC indeed they would be happy to receive your vulnerability report even if you did not wish to participate in any particular bug bounty program.