In the project we find such applications as:
- Keepass
- Filezilla
- Notepad++
- Putty
- VLC Media Player
and more other.
Total prize pool is over 500 million euro.
In January, the EU starts running Bug Bounties on Free and Open Source Software
When I click on that link, my antivirus says there is a malicious link on the website!
Also - cool idea, but what's to stop developers from colluding to introduce bugs and the get the bounty?
@Zelgada
You have popular app in open source world, you add a special bug and want you get a money? At this point you are finished as a developer and no one will trust you for the next. Developers who develop your project can move away from it and your program will falled. Nobody will take such a risks.
Yes, that is a really big problem @DocBox ! If the software is open source, anyone can contribute. I would never add a bug on purpose, no honest developer would. And yet, bugs exist. How can I be certain that a pull request from someone doesn't have a well disguised bug in it?
Then someone else discovers it. It makes it much harder for me to run an open source project because I have to keep the trust of people. I do not want to punish people if they make an honest mistake with a bug in contributing. It happens. But it will be hard to prove it if the bug was on purpose.
I am worried this will actually increase bugs in open source!
Watch this documentary called the trap: https://m.youtube.com/watch?v=y97Ywl7RtUw