Postgres Pro
Downloads
Home   >   mailing lists

Re: Trustly PostgreSQL Data Corruption Bug Bounty Program - Mailing list pgsql-hackers

From Simon Riggs
Subject Re: Trustly PostgreSQL Data Corruption Bug Bounty Program
Date
Msg-id CANP8+jL1h+Fh9FQuzdiHGwdJYrprg4eZp=mJ7F2rcz2rfEY-nA@mail.gmail.com
Whole thread Raw
In response to Re: Trustly PostgreSQL Data Corruption Bug Bounty Program  (Josh Berkus <josh@agliodbs.com>)
Responses Re: Trustly PostgreSQL Data Corruption Bug Bounty Program  (Peter Geoghegan <pg@heroku.com>)
List pgsql-hackers
Tree view
On 24 June 2015 at 19:18, Josh Berkus <josh@agliodbs.com> wrote:
On 06/24/2015 10:15 AM, Joel Jacobson wrote:
> You are most welcome to contact me at joel@trustly.com or by replying
> to this thread, if you have any suggestions on how to improve this
> bug bounty program, or if you have any other feedback in general.

Members of the PostgreSQL Security Team need to be disqualified from
eligibility, of course.

..err... this is for data corruption bugs, not security.

Editing data files by privileged users doesn't count, since it needs to be reproducible.

Thanks Joel, good idea.

--
Simon Riggs                http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services

pgsql-hackers by date:

Previous
From: Alvaro Herrera
Date:
Subject: Re: Add CINE for ALTER TABLE ... ADD COLUMN
Next
From: Peter Eisentraut
Date:
Subject: Re: Should we back-patch SSL renegotiation fixes?