4 ms·
Unfortunately, The bounty from the tor project isn't nearly as much It sounds like it's a privacy leak, but not an RCE/SBX? Especially as it's saying that the
by gcp 9y ago
Unfortunately, The bounty from the tor project isn't nearly as much
It sounds like it's a privacy leak, but not an RCE/SBX? Especially as it's saying that the sandboxed version of Tor isn't affected.
Bit sad that you can't click the revisions on https://trac.torproject.org/projects/tor/ticket/23044#no2 https://trac.torproject.org/projects/tor/ticket/23044#no2 to see the diff.
- julianj 9y agoSo I believe the max bounty without a bonus for any Tor vuln through their bug bounty program is 4k. The max for the Tor Browser Bundle is 3k.