Delivery-Date: Mon, 18 Jan 2016 06:18:26 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	T_RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 41E171E300C;
	Mon, 18 Jan 2016 06:18:24 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 606C838BEA;
	Mon, 18 Jan 2016 11:18:15 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 758A238BEB
 for <tor-talk@lists.torproject.org>; Mon, 18 Jan 2016 11:18:11 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id R68ECh_Yv4GK for <tor-talk@lists.torproject.org>;
 Mon, 18 Jan 2016 11:18:11 +0000 (UTC)
Received: from bilestoad.getfoxyproxy.org (bilestoad.getfoxyproxy.org
 [162.243.99.25])
 by eugeni.torproject.org (Postfix) with ESMTP id 5B97838BD7
 for <tor-talk@lists.torproject.org>; Mon, 18 Jan 2016 11:18:11 +0000 (UTC)
Received: from www.example.com (unknown [31.162.199.206])
 by bilestoad.getfoxyproxy.org (Postfix) with ESMTPSA id B590213D77F
 for <tor-talk@lists.torproject.org>; Mon, 18 Jan 2016 11:18:07 +0000 (UTC)
To: tor-talk@lists.torproject.org
References: <CABFqnbEvdDydvhLdVkCm7_9Pp07LQhEd4Sf-m5_cbXpstUpo7g@mail.gmail.com>
From: Georg Koppen <gk@torproject.org>
X-Enigmail-Draft-Status: N1110
Message-ID: <569CC9DB.8000901@torproject.org>
Date: Mon, 18 Jan 2016 11:17:47 +0000
MIME-Version: 1.0
In-Reply-To: <CABFqnbEvdDydvhLdVkCm7_9Pp07LQhEd4Sf-m5_cbXpstUpo7g@mail.gmail.com>
Subject: Re: [tor-talk] hackerone
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============2257932402858649122=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============2257932402858649122==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="XDak2CM8WBx9g5vcsIEDm7hXLhDeDJIJ1"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--XDak2CM8WBx9g5vcsIEDm7hXLhDeDJIJ1
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Hi,

charfeddine hamdi:
> hi
> i found some security issue and vulnerability in your site

You mean on our website?

> and i read in article you have a private bug bounty program on hackeron=
e.com
> and i want to report this issue and vuln to you

We don't have a good means currently for dealing with vulnerabilities in
our website, alas. If you think the one you found is too sensitive to
talk about in an unecrypted mail, feel free to send me an encrypted one
and I try to figure out the person that might want to look at it.

> Please , if you can invite me to your bug bounty program

Well, the program is currently only for core Tor and the Tor Browser.
The website is not included. That said, if you still want to get
invited, contact me off-list.

Georg

> my username : charfee
> email : charfe3@gmail.com
> and thanks
>=20



--XDak2CM8WBx9g5vcsIEDm7hXLhDeDJIJ1
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJWnMnqAAoJELu5eskkaQkDcpkP/3I7y7jW5lCTzIEbLoy6j8C/
h0CtIiBCMli/tqSvUVQBJOiBZJKED83mjxp14epRrk926PVQi+Csv3i21oJlOolo
+ofbL8SbGXvf4vVlQC5s9FbYk4lnv4giQe9ISZOB+R54MlVhjreO5KeX7Av/cX3Z
qkQ1OtTTDDFkHxAAgWBr95JeHkIEK5mgK/pSZVPTFTIGgU9gWPKaciFbooDYXKix
pVxcJ48UX7FDfhDlnCxxdGChVHGOeOdJgbaOQfnEb6jFuU+IhhbLTjmhX0i4BKn5
gkRqzJmvpQWwOZzj1ijTxcU1OQT8VMyBF72+T3rxym4WPVPCtAIT6wA6kCjxO1Bb
5eNbm6GQzUwBqaImZmecG+dbpuiaWHQHQSti9kx+efkKOWMlgRgDqLzGjovW3x3/
yK+3GAhiVWrnaRAFWn70EkXqOTx987nSINuw4bAk2qNaKT/Cap1G9CBW2twQshOw
o5ONiWkqWaQT2IVNQ8T/BVtwLjccx17hG53qDDDQu0fmt50RDC51cA3MkA4JSdDO
DJLt8vo0v/RSBi7gh9wa5xZdP66HEuSvx2ghbJBH2wC1Fo+OJAH1N99A9Uauzj2/
RWlK7iuQroXFlm6GyqdCKCxOdRA5XpPN1phIhlNdnnCNj9d1MSJduWUWZg8MMy9A
2Suc0TSJTVqXAgAT3A//
=7Kue
-----END PGP SIGNATURE-----

--XDak2CM8WBx9g5vcsIEDm7hXLhDeDJIJ1--

--===============2257932402858649122==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============2257932402858649122==--

