FOSSA bug bounty program

[Florian Weimer]

* Jérôme Benoit:

> Le 31/12/2018 à 12:10, Florian Weimer a écrit :
>> glibc is listed as a participating project here:
>
> I will not say participating but targeted project.

I prefer not to be targeted by bounty hunters, thank you very much.

>>   <https://juliareda.eu/2018/12/eu-fossa-bug-bounties/>
>>
>> Has anyone been in contact with them?  How do they propose to deal
>> with their findings?
>
> I think the people in charge are going to contact each FOSS projects
> listed, even if I think they should have done it beforehand. 

Why do you think that?  In general, that doesn't seem to happen, and
the platform operator assumes that the code owner and the
bounty-issuing organization are the same.