The OSTIF Bug Bounty Program has Officially Begun We are proud to announce that the pilot program for OSTIF bug bounties has started. This means that researchers around the world can now find application and security flaws in OpenVPN and VeraCrypt for monetary and career-building rewards. The maximum award for OpenVPN and VeraCrypt is a $5000

We have just posted our Windows 7 hidden operating system guide on YouTube here: https://www.youtube.com/watch?v=BFfl-YGsOGA In this guide, we show you how to create a VeraCrypt Windows 7 hidden operating system. This enables you to hide your operating system within an encrypted partition, creating data assurance for your OS and maximum privacy. VeraCrypt is powerful, free, open-source

OSTIF's 2017 Open Books Have Been Updated Our commitment to keep our financial transactions fully transparent continues. We have updated our public books to current. You can view them here: https://docs.google.com/spreadsheets/d/1OqWBlNwk5be2c74cRlmYOdhLWPeCjCBAALxYCdMwIaM/ Our biggest items of note in 2017 so far are the donations and expenses related to the OpenVPN 2.4 fundraiser. You can view the results of the OpenVPN

The OSTIF and QuarksLab audit of OpenVPN 2.4.0 has been completed, and this is the public release of the results. The quick and dirty: OpenVPN 2.4.0, the NDIS6 TAP Driver for Windows, the Windows GUI, and Linux versions were evaluated. This release included a number of new features including control channel encryption. QuarksLab found: 1 Critical/High Vulnerability CVE-2017-7478 1

New Attacks on Privacy Show That Legal Solutions Cant Be Relied On One of the core concepts that motivated me to create the OSTIF is the belief that the Internet is an enormous tool for good. In order for us to be able to enjoy the fruits of free information, we need to have agency

The Audit of OpenVPN is Complete We have confirmed with QuarksLab that the security review of OpenVPN 2.4.0 is complete, and that they are now documenting the results. The process will then proceed as follows: QuarksLab will securely give these results to the OpenVPN security team on April 7th. The OpenVPN team will review the results and create

Open Source Technology Improvement Fund's Open Books for 2017 We have been late to the party on updating our open books for 2017. I have gone through and updated them finally today. https://docs.google.com/spreadsheets/d/1OqWBlNwk5be2c74cRlmYOdhLWPeCjCBAALxYCdMwIaM The big items of note: -The OpenVPN Fundraiser has concluded and we beat our goals by a comfortable margin. These excess funds are being reserved

2015 and 2016 financial report for the Open Source Technology Improvement Fund, Inc. 2016 was a year of rapid growth for OSTIF. We've met or exceeded all of our goals and have two major successes under our belts, the fundraising and auditing of VeraCrypt 1.18 and the fundraising and auditing of OpenVPN 2.4. This document is

The OpenVPN Audit Begins February 15th 2017 The OpenVPN audit is going to be carried out as planned by QuarksLab's Gabriel Campana and Jean-Baptiste Bedrune on February 15th 2017. There will be 90 man-days of work completed throughout this audit and it will take approximately 45 days to complete. During this time period, we will work with

After our successful fundraiser for OpenVPN, we are now moving forward with getting shirts for our supporters printed and shipped out. You can see the designs here. We have sent emails out to our individual contributors that have made qualifying donations already. Check your emails! Some of you donated through anonymous methods where we could not