Emelia πΈπ» (@thisismissem@hachyderm.io)
This is a program that I've been championing within @nivenly over the past year, after we noticed that security vulnerabilities weren't being responsibly, and not enough research was going into the security of Fediverse software.
You might remember my Pixelfed vulnerability from last year, where OAuth scopes weren't checked allowing for privilege escalation via the API (CVE-2024-25108), that was our very first test-case of this program.
I'm incredibly proud to be involved in launching the Fediverse Security Fund from Nivenly Foundation (a 501(c)4 not-for-profit cooperative)
#fediverse #security #nivenly #FediverseSecurityFund
RE: https://hachyderm.io/@nivenly/114268491892140498
hachyderm.io Β· Hachyderm.io