Quote from: Digital Lucifer on July 14, 2018, 12:01:17 pm

Quote from: sschiessl on July 14, 2018, 07:54:32 am

Quote

It is ready for grading, but later additions that are less integral to the lore correctness of this proposal are planned.

I don't understand what you are saying here, could you please elaborate?

It's a spam bot. I've been sending Fav PM's on Telegram but he has not removed it yet.

use the report link please

Hahaha, ok i'll raise blind

Done.

Hey everybody!

A couple months ago, while working with the UI/app team in my spare time, I realized that we don't have a formalized method for reporting serious vulnerabilities.

If a security researcher/hacker found a critical bug in the DEX, they might be tempted to exploit the bug, and attempt to steal funds from unsuspecting users. Without a public bug bounty system, hackers do not have an obvious path of disclosure for reporting their findings. They also do not have any incentive to share their exploits and techniques, rather than using them for personal gain.

With this proposal, we’d like to start a BitShares bug bounty program for security researchers and penetration testers (...aka hackers!) to disclose important security vulnerabilities they find within the BitShares core protocol, reference wallet, and related code repositories.

The proposal will use allocated funds to reward those that step forward with exploits, relative to the overall risk assessment of the exploit. The higher the payout for critical bugs, the more incentive there will be to attract higher quality researchers, and ultimately providing better security coverage for the DEX.

Funds will also be used to build and maintain a website (https://hackthedex.io/) for reporting vulnerabilities. The website will include all the information needed for researchers to report a vulnerability, as well as an archive of bounty reports and a leaderboard to encourage a little friendly hacker competition. It will also lay the groundwork for future HackTheDEX worker proposals to improve the security and safety of BitShares as a whole.

Thanks to coordination with the foundation, worker proposal funds will be held in a BBF escrow account and unused funds will be refunded back to the network at the end of the proposal period.

For your consideration: https://www.bitshares.foundation/workers/2018-07-hackthedex

Thanks!

-- Matt

Glad to see this level of stepping up to secure the Blockchain.

You have full support from me personally and all partners/collaborations I can affect to give you vote. Although, I would be asking for some proper time-tracking soft/app for those Audit hours, before any complicated workers with chaotic structure of many layers of teams get our votes in the future.

Why? We have 4 contacts total, 2 for 2 teams, where 1 contact is on both teams, and 1 contact with no team on this proposal is Audit on one of the teams in another worker. That contacts are assigning audits to specific devs, and without proper time-tracking, those devs can be wronged or network can be charged for more hours than it was done.

I'm calling Ryan Fox here to suggest a solution, as most experienced Business Dev around.

My personal suggestion would be TopTracker (FREE - Web, Mac, Win). Unlimited projects(workers), teams, members. Very nice exports in both CSV and PDF.

Cheers,

DL.

1) I do support this proposal as individual, not as representative of any 4profit or non-profit organization/business.
2) Previous proposal showed downtime:

nodes - except bad SSL deployment at the very own beginning, working quite well ever since with uptime over 85% which is for me as hosting owner and bts nodes manager quite good.
faucet - it's an unknown bug where everybody spent hours on, trying to fix it and simply it's just random. Simple as Reset is bringing it back.

3) Importance of having committee owned faucet and onboarding account that is paying fees and regulating half of the network is something that currently only BBF offers. Rest of the Faucets are 3rd party owned and nobody can affect them, Vouch for them or provide to users of BitShares any word of guarantee that they are safe and processed "by the book".

4) Automation of services deployment such as Docker is quite important for Linux newbies. I believe this should be continued and maybe even setup as separate proposal where team could be bigger and specially focused on automation/distribution packaging of our software/services. I think it would encourage more people to step up and contribute, where both core and bbf would got less to do, just more to manage. As my personal opinion this would be bold move.

5) I guess i'll see burned back that 800$ for WildCard SSL since you were/are running LetsEncrypt. Will Premium SSL's be this time from Positive/Comodo or you have something else in mind ?

I have nothing more to say as individual.

All from me, for now

Cheers!

To add that missing Scorum review:

https://steemit.com/bitshares/@apasia.tech/graphene-world-cup-2018-group-1-20180628t034858298z-post

While we agree that it is quite important to do an UX research and design, the quote for this type of work that was provided is puzzling, to say the least. Just to see if it has something to do with a reality we've contacted Lebedev design studio (https://www.artlebedev.ru/) who are the top design studio in Russia with hundreds of projects for top banks in Russia and worldwide and got a quote from them.

We've got their reply (which is in Russian, but they are willing to provide another one in English) their quote is 3 times lower than the one that Scorum team provided, and as they have a lot of experience in UX design we are sure it is much more grounded in reality. After researching Bitshares they are interested in proceeding with this via payment through worker proposal. If the community response is positive, they will proceed with creating a worker proposal. We will be talking about this topic a little bit during Bitshares hangout this Saturday, so please come if you have any opinion on the matter.



https://sales.design.ru/pub/D0A682AC9577746D?eid=40834

pdf screenshot



the prices in Russian rubles
 
 usd rub exchange rate: 63 RUB for 1 USD

As a reminder: the Committee is approved by stakeholders and formally tasked with setting policy for the BitShares blockchain including:

Transaction and trading fees;
Blockchain parameters, such as block size, block interval; &
Referral and vesting parameters such as cash back percentage and vesting periods.

re Fav and seems like its perfect set of tasks for someone with B.A. in Economics.

As long as we are transparent and honest about everything, seems that nothing can become conflict of interest. Just that amount of posts under your name says enough about how long and how much You have been involved in development of BTS and support given to it, independently.

Proxy and positions you have are well earned and given by self-initiative of respected account holder giving you his vote/trust. Having so many of them... I can't find to

Respect.

First of all, there are 3 core developer. 2 main + 1 junior. They are busy and without YOU GIVING more info nobody will contact you.
Second of all, and final one, one main dev (abitmore) did instructed you well and nice where and how to ask for help. By being ignorant, you just probably lost interest/rep/credibility with 1 of them.

Take a look at here if you wanna discuss more:

https://bitsharestalk.org/index.php?topic=26633.0

Cheers,

DL.

P.S. Admin/Moderator please lock this thread and move it to trash. Thanks in advance.