[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-dev] Responsible disclosure

To: tor-dev@xxxxxxxxxxxxxxxxxxxx
Subject: [tor-dev] Responsible disclosure
From: Bram de Boer <bram@xxxxxxxxx>
Date: Thu, 18 Sep 2014 22:59:44 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Thu, 18 Sep 2014 16:59:59 -0400
List-archive: <http://lists.torproject.org/pipermail/tor-dev/>
List-help: <mailto:tor-dev-request@lists.torproject.org?subject=help>
List-id: discussion regarding Tor development <tor-dev.lists.torproject.org>
List-post: <mailto:tor-dev@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev>, <mailto:tor-dev-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-dev>, <mailto:tor-dev-request@lists.torproject.org?subject=unsubscribe>
Reply-to: tor-dev@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-dev" <tor-dev-bounces@xxxxxxxxxxxxxxxxxxxx>

Hi,

How can I responsibly report a bug that might affect security (e.g. possibility to DoS Tor nodes)? I searched the torproject.org website, but couldn't find any pointers with respect to responsible disclosure.

Do I just file a trac ticket and/or drop it in this mailinglist? Do I report it directly to some of the key players in this project (Roger, Nick, etc.)?

Thanks,
Bram

_______________________________________________
tor-dev mailing list
tor-dev@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Follow-Ups:
- Re: [tor-dev] Responsible disclosure
  - From: Damian Johnson

Prev by Author: [tor-dev] Scaling tor for a global population
Next by Author: [tor-dev] Transparent Proxy: how does it work?
Previous by thread: [tor-dev] Reminder OONI dev meeting happening tomorrow
Next by thread: Re: [tor-dev] Responsible disclosure
Index(es):
- Author
- Thread