Page 1 of 1

European Commission launches bug bounties for FLOSS

Posted: Sun Dec 30, 2018 1:29 pm
by Midas
A bit of good news on the free software front to start the coming year, from an unusual source...
In January the European Commission is launching 14 out of a total of 15 bug bounties on Free Software projects that the EU institutions rely on. A bug bounty is a prize for people who actively search for security issues. The amount of the bounty depends on the severity of the issue uncovered and the relative importance of the software. The software projects chosen were previously identified as candidates in the inventories and a public survey.
@ https://juliareda.eu/2018/12/eu-fossa-bug-bounties/

The initiative is budgeted with over 850 thousand Euros; here's the full list of programs, some of which are featured on TPFC: Filezilla, Apache Kafka, Notepad++, PuTTY, VLC Media Player, FLUX TL, KeePass, 7-zip, Digital Signature Services (DSS), Drupal, GNU C Library, PHP Symfony, Apache Tomcat, WSO2, midPoint.

BTW, the news is conveyed by the Pirate Party MEP, Julia Reda!

Re: European Commission launches bug bounties for FLOSS

Posted: Sun Dec 30, 2018 6:21 pm
by webfork
This is fantastic news. It's been a while but I remember seeing quite a few commercial software providers going after security researchers for revealing bugs that this program will help resolve. Kudos to the European Commission for recognizing the broad value of FLOSS to it's own interests and security.