restricted network abstract regulatory fractal
FREE2Z

Bounty Program for Privacy and Security

A bounty program to enhance privacy, security, and combat malware on the Free2z platform. Help identify and resolve issues and receive rewards.

March 17, 2022· 2 min read
1.9K score

🚨📢
Edit: we now have a 100 ZEC pool

Edit June 14th:
F everything, we're doing 11 ZEC


The bounty for finding a flaw that would negatively impact free2z users has been increased from 3 ZEC to 7 ZEC

Privacy, security, malware

Free2z should always score extremely high for privacy and perfect for malware when assessed by 3rd parties like sucuri.

Privacy

Some things provided by 3rd parties are not very good for privacy - like a 3rd party oembed from Twitter or YouTube. So, we may get dinged for that a little bit. I can guarantee you that free2z itself has no ads, no tracking, no cookie beyond the basic session for logging in.

Security and Malware

I believe firmly that there is arbitrarily small $\epsilon$ possibility for there ever to be any malware on this site. I use industrial-strength sanitized rendering of the user-generated content, there are no uploads and I tightly control the build/deploy/infrastructure myself using a free and open source software stack that is the best-of-the-best. If there ever is malware, it would be because a library I rely on has a bad bug or I got completely pwnd by malicious hackers. I think the probability of that is small.

Any scan from any 3rd party should always look like this:

Or like this:

Conclusion

If you detect any possible problems on free2z - privacy, security, malware or otherwise, do not hesitate to reach out. If it happens to be a bad exploit that you want to let me know of, please share with me in private:

@free2zcash

@_skyl

If you have a less sensitive issue that you can report without giving attackers more information, you can put it on our public github:

https://github.com/skyl/free2z/issues

If you find a real instance of malware that could affect users of free2z (with hard evidence), I will send you 3 Zcash. For other useful heads up, I will send you some Zcash based on how much I feel the contribution was worth :). Contributions to this zPage will be redistributed to the community members who find and report problems with the site.

Thank You,
Skylar Saveland

Related Articles