starred/cypht

Fork 0

mirror of https://github.com/cypht-org/cypht.git synced 2026-04-25 04:56:03 +03:00

[GH-ISSUE #366] Security Audit #314

New issue

Open

opened 2026-02-25 21:34:43 +03:00 by kerem · 8 comments

kerem commented

2026-02-25 21:34:43 +03:00

Owner

Originally created by @dumblob on GitHub (Dec 27, 2019).
Original GitHub issue: https://github.com/cypht-org/cypht/issues/366

🗣 Suggestion

As discussed already before in https://github.com/jasonmunro/cypht/issues/11#issuecomment-283608217 , a security audit would be beneficial. Today I heard about Google Patch Rewards extending their offering to all open source projects. Cypht could try to apply 😉.

Originally created by @dumblob on GitHub (Dec 27, 2019). Original GitHub issue: https://github.com/cypht-org/cypht/issues/366 ## 🗣 Suggestion As discussed already before in https://github.com/jasonmunro/cypht/issues/11#issuecomment-283608217 , a security audit would be beneficial. Today I heard about [Google Patch Rewards](https://docs.google.com/forms/d/e/1FAIpQLSd8e9sUxexNHi7UcADE17iR5MtRUfRYReweCL2ULNbdY61gww/viewform ) extending their offering to all open source projects. Cypht could try to apply :wink:.

kerem added the

help wanted

label

2026-02-25 21:34:43 +03:00

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@Yamakasi commented on GitHub (Dec 28, 2019):

@dumblob I have discussed earlier with Jason to do a security audit which will (hopefully) be funded by me when possible.

Jason has a company he likes to get the audit done with but as I'm not ready to to go production it will be in Q2 of 2020 before I can discuss that with him further :)

@Yamakasi commented on GitHub (Dec 28, 2019): @dumblob I have discussed earlier with Jason to do a security audit which will (hopefully) be funded by me when possible. Jason has a company he likes to get the audit done with but as I'm not ready to to go production it will be in Q2 of 2020 before I can discuss that with him further :)

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@dumblob commented on GitHub (Dec 28, 2019):

@Yamakasi sounds interesting, keep us posted here. Btw. even if you want to fund it, it still makes a lot of sense to gather the funding from several different sites, so you can still take a look at Google Patch Rewards and other private or public sector sponsors.

@dumblob commented on GitHub (Dec 28, 2019): @Yamakasi sounds interesting, keep us posted here. Btw. even if you want to fund it, it still makes a lot of sense to gather the funding from several different sites, so you can still take a look at Google Patch Rewards and other private or public sector sponsors.

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@jasonmunro commented on GitHub (Jan 7, 2020):

@dumblob this looks worth giving it a shot. Even the "small" tier would likely cover a full security audit (based on old unofficial quotes but still). I will check out the application process and update this issue when I do.

@jasonmunro commented on GitHub (Jan 7, 2020): @dumblob this looks worth giving it a shot. Even the "small" tier would likely cover a full security audit (based on old unofficial quotes but still). I will check out the application process and update this issue when I do.

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@marclaporte commented on GitHub (May 31, 2020):

@Yamakasi : any news?

Thanks!

@marclaporte commented on GitHub (May 31, 2020): @Yamakasi : any news? Thanks!

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@marclaporte commented on GitHub (Jul 31, 2022):

Anyone want to lead this?

@marclaporte commented on GitHub (Jul 31, 2022): Anyone want to lead this?

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@marclaporte commented on GitHub (Oct 22, 2022):

I am ready to co-sponsor a security audit on Cypht. We just need one more co-sponsor and we can proceed. Please contact me if you are willing to also be a co-sponsor.

@marclaporte commented on GitHub (Oct 22, 2022): I am ready to co-sponsor a security audit on Cypht. We just need one more co-sponsor and we can proceed. Please contact me if you are willing to also be a co-sponsor.

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@dumblob commented on GitHub (Nov 8, 2022):

IDK - Mozilla again 😉?

@dumblob commented on GitHub (Nov 8, 2022): IDK - [Mozilla again :wink:](https://blog.mozilla.org/en/mozilla/mozilla-launches-first-of-its-kind-venture-fund-to-fuel-responsible-tech-companies-products/ )?

kerem commented

2026-02-25 21:34:44 +03:00

Author

Owner

@marclaporte commented on GitHub (Nov 8, 2022):

Ok, looking for a volunteer to draft up the request/proposal.

@marclaporte commented on GitHub (Nov 8, 2022): Ok, looking for a volunteer to draft up the request/proposal.