Conversation

Notices

1. Embed this notice
   daniel:// stenberg:// (bagder@mastodon.social)'s status on Friday, 26-Apr-2024 16:15:14 JST daniel:// stenberg://

   Over the last five years of #curl's bug-bounty we have received 489 submissions. For these 489 submissions the *median* first-response time has been, as calculated by Hackerone: 0 (zero) hours. If this does not ooze of awesomeness from a security team I don't know what does.

   I presume they round or truncate to the nearest integer hour. Still means more than half of them got answered within an hour. Whenever or from wherever they were filed.

   We take security seriously.

   • kaia likes this.
   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Friday, 26-Apr-2024 16:37:58 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @bagder How many of them were actual issues?

   • Embed this notice
     daniel:// stenberg:// (bagder@mastodon.social)'s status on Saturday, 27-Apr-2024 21:05:26 JST daniel:// stenberg://

     in reply to

     • Ryan Castellucci :nonbinary_flag:

     @ryanc 69 (15.7%)