<story><title>Tarsnap exploit bounty</title><url>http://www.daemonology.net/blog/2015-08-21-tarsnap-1000-exploit-bounty.html</url></story><parent_chain></parent_chain><comment><author>tptacek</author><text>I will match this bounty. Colin&amp;#x27;s word on whether it should be awarded is final, and Colin can reach out to me to tell me who I have to pay up to (or, if the recipient would prefer, I can transfer money to Colin and he can just double the bounty).&lt;p&gt;Colin: if you post this bounty publicly anywhere, you have my permission to note also my commitment to match the bounty, which will remain ongoing until either (a) your bounty changes, or (b) I notify you otherwise (which is unlikely).&lt;p&gt;Good luck, everyone. I will be surprised and happy if this HN comment costs me anything. :)</text></comment>
<story><title>Tarsnap exploit bounty</title><url>http://www.daemonology.net/blog/2015-08-21-tarsnap-1000-exploit-bounty.html</url></story><parent_chain></parent_chain><comment><author>gus_massa</author><text>Just to be 200% clear: cperciva is offering $1000 for an exploit of a bug in Tarsnap 1.0.35 that he already fixed in the current 1.0.36 version?!</text></comment>