OSTIF is Working with Monero Research Lab on Bulletproofs We are happy to announce that we have been working with the Monero project to help them locate auditing resources for Bulletproofs. This code review is to evaluate the safety of the implementation of Bulletproofs into Monero, which promises to dramatically…
OSTIF in 2018 - Our Plans for the Future 2017 was a wild ride, with OSTIF raising roughly double the funds that we did the year prior. We've learned a lot along the way, and are working hard to get even more done in 2018. These plans include widening support…
November 19th OpenSSL Fundraiser Updates - Progress and Thank Yous Our work fundraising for the massive OpenSSL 1.1.1 project continues. Our project is now up to hundreds of backers and dozens of companies and organizations. I would like to thank OpenVPN Technologies for their continued support (they have donated an…
OpenSSL 1.1.1 Fundraising Progress (This post will be updated regularly as we gain more sponsors and progress toward our total goal.) We are happy to announce that we have raised 36% of the money needed to audit OpenSSL 1.1.1 with three weeks of fundraising completed. We expect to meet our…
The OSTIF Public Books Have Been Updated - October 2017 We have updated our 2017 Books to current, and they can be viewed here: https://docs.google.com/spreadsheets/d/1OqWBlNwk5be2c74cRlmYOdhLWPeCjCBAALxYCdMwIaM Highlights since the last major update of the books: -Private Internet Access has become our first Platinum Sponsor. This means that they have committed to…
Welcome to Private Internet Access for Becoming our First Platinum Sponsor! We are welcoming Private Internet Access to the OSTIF family, as they have became our first platinum sponsors. Their commitment to free and open software has been tremendous, first funding two OpenVPN code review projects and now the OpenSSL…
Security researcher Guido Vranken has had the honor of being our first bug bounty payout totaling $5000 USD for his work on fuzzing OpenVPN 2.4.2 and finding a variety of memsafe and error handling flaws, responsibly disclosing them, and working with OSTIF and the OpenVPN security team to integrate his…
The OpenSSL 1.1.1 Audit Fundraising has Begun! What are we doing? Like our other fundraisers, OSTIF is reaching out to the public to fund a thorough and open audit of OpenSSL 1.1.1. This particular version is important because OpenSSL 1.1.1 introduces significant pieces of new code to implement the new…
We have set up the infrastructure to enable donations via Monero. Monero is a fully open-source and decentralized cryptocurrency that improves on the privacy shortcomings of Bitcoin through obfuscation technologies like RingCT and is currently working on an i2p based routing system to further privatize transactions, called Kovri. The Monero…
The OSTIF Bug Bounty Program has Officially Begun We are proud to announce that the pilot program for OSTIF bug bounties has started. This means that researchers around the world can now find application and security flaws in OpenVPN and VeraCrypt for monetary and career-building rewards. The maximum award for…