Wano, mujja kusanga ebiragiro n'obulagirizi ebikwata ddala ku bantu abenyigira mu Bug Bounty Program yaffe. Ebiragiro bino bisaanidde okusomebwa wamu n' Ebiragiro Ebijjuvu ebikwata ku Bakolagana mu Bizinensi (ebiyitibwa "Ebiragiro Ebijjuvu"). Ebigambo byonna ebinnyonnyodde ebikozesebwa mu Biragiro bino ebya Bug Bounty Program birina amakulu agaweereddwa mu Biragiro Ebijjuvu.
1. Enyanjula
1.1. Ebigambo bino bikwata ku kwetaba kwammwe mu bwetoolooze mu nteekateeka ya Deriv eya bug bounty, egaba ensikiriza eri abeetabamu okuzuula n'okutegeeza ebikyamu oba obutuukirivu obutali bulungi mu sisitemu ya Deriv eya software oba netiweka, mu kifo ky'empeera y'ensimbi (“Programme”). Bwe muba mutegeeza ekikwata ku butuukirivu obutali bulungi obukwatagana n'obuweereza bwonna obwa Deriv obw'oku yintaneeti gye tuli oba okwetaba mu Programme mu ngeri endala yonna, mukakasa nga musomye era mukkiriziganyizza n'ebigambo bino.
1.2. Mukkiriza nti Pulogulaamu eno si mpaka wabula pulogulaamu ey'okugezesa era ey'empeera esalirwa mu magezi gaffe.
2. Ekiwayi
2.1. Ekiwayi kya Pulogulaamu eno kinnyonnyolwa mu bujjuvu ku mukutu gwa Pulogulaamu. Bwe mutaba bakakafu oba ebimu ku bikwatako biri mu kiwayi kya Pulogulaamu eno, muweereze email ku security@deriv.com okukebera nga tebanaba kugezaako kugezesa kwonna.
3. Abeetabye abasaanira
3.1. Temusobola kwetaba mu Pulogulaamu bwe:
3.1.1. Omukozesa wammwe oba ekibiina gye mukolera tekibakkiriza kwetaba mu bika bya pulogulaamu bwe bino;
3.1.2. Muli oba mwali bakozi baffe oba ab'emu ku kkampuni z'omu kibiina kyaffe;
3.1.3. Muli muganda wa kumpi ow'omukozi oba omukozi eyali asooka okukolera ffe oba kkampuni yonna ey'omu kibiina kyaffe.
3.2. Bwe tumanya oba netulina ensonga ey'okukekereza nti mutuukiriza kimu ku bisaanyizo ebiri waggulu, tulina obuyinza okubaggyawo mu Pulogulaamu n'okuggyawo okusasulwa kwonna okwa bounty kwe mwandifunye.
4. Empeera eziyinza okubeerawo
4.1. Tulina obuyinza okusalawo oba lipoota y'akabi (vulnerability report) eyaweerezebwa esaanira empeera. Ekisalirwawo oba empeera egenda kusasulwa oba nedda kiri mu magezi gaffe ddala.
4.2. Okusalawo kwaffe kwonna okukwata ku muwendo gwa bounty kwe kusembayo era tekusoboka kukyusibwa.
4.3. Emiwendo gya bounty gisinziira ku kika n'obukulu bw'ebikwata ku data ekozeeko, obwangu bw'okugikozesa mu bubi, n'akabi akatuuka ku bakasitoma baffe ne bbulaandi yaffe, singa ekizibu ekyogeddwako kikakasibwa okuba ekizibu ekya nneyisa entuufu eky'obukuumi ekikiriziddwa akakiiko kaffe ak'Obukuumi.
5. Ebyetaagisa mu kuwaayo bug
5.1. Ebyo bye muweereza bisaanidde okugoberera ebiragiro bino wammanga:
5.1.1. Muwe okunnyonnyola okujjuvu okukwata ku kizibu ky'obukuumi kye muwaayo, nga mulimu engeri gye kiyinza okukozesebwa mu bubi n'ebikikwatako.
5.1.2. Mulage obukakafu n'okunnyonnyola bya buli kadde akeetaagisa okuddamu okukola ebyo bye muwaayo, ebiyinza okuli:
5.1.2.1. Vidiyo;
5.1.2.2. Screenshots;
5.1.2.3. Koodi ya Exploit;
5.1.2.4. Ebipimo bya Traffic;
5.1.2.5. Ebisaba n'eby'okuddamu ebya Web/API;
5.1.2.6. Endagiriro ya email oba ID y'omukozesa ey'akawunti yonna ey'okugezesa; ne/oba
5.1.2.7. Endagiriro ya IP eyakozesebwa mu kiseera eky'okugezesa.
5.2. Obutatuusa kimu ku bintu ebyogeddwako waggulu kisobola okulwisaawo oba okuteganya okusasulwa kwa bounty.
6. Okubikkulirwa kw'ebikwata ku byama
6.1. Mukkiriza obutayogera ku bizibu by'obukuumi ebizuuliddwa (ne bwe biba nga byamalibwawo) ebweru wa Pologulaamu nga temufunye lukusa lwaffe mu buwandiike.
6.2. Mweyama okugoberera ebiragiro bya Deriv eby'okubikkulirwa. Bwe muba mulowooza nti muzudde ekizibu ky'obukuumi, mukyogereko n'okunnyonnyola okujjuvu okw'ekizibu ekyo, nga mugoberera ebiragiro by'okuweereza ebyogeddwa mu Nsonga 5 waggulu.
7. Layisinsi
7.1. Olw'ekyo mutuwa olukusa olutasasulwa, olusasuddwa mu bujjuvu, olutaliiko nkomerero, olutasobola kuggyibwawo, olw'obwannannyini bwokka, olw'ensi yonna, olusobola okukwasibwa omuntu omulala, era olusobola okuwebwa ab'okuddiriŋŋanwa, ku ripoota yonna n'endowooza yonna gye mutuwa. Mukkiriza nti tulina eddembe eritalina kkomo ery'okukozesa ripoota n'endowooza eyo. Tulina eddembe ery'okutakozesa kimu oba byonna ku bye mutuwa. Muwaayo obusobozi bwammwe obw'okusaba empeera yonna olw'okuteekebwamu ebintu byonna mu ripoota oba endowooza yonna gye mutuwa ekwata ku bintu n'obuweereza bwaffe.
7.2. Era mutegeera era mukakasa nti tuyinza okuba nga twakola oba twatonzesa ebintu ebifaananako oba ebyenkanankana n'ebyo bye mwawaayo, era muwaayo obusobozi bwammwe obw'okuwaayo empoza yonna eyinza okuva ku kufaananako n'ebyo bye mwawaayo. Mutegeera nti temukakasibwa mpeera yonna oba ekitiibwa kyonna olw'okukozesa ebyo bye mwawaayo.
7.3. Mulaga era mukakasa nti ebyo bye mwawaayo mulimu gwammwe, nti temukozesezza bikwata ku muntu oba kibiina kirala, era nti mulina eddembe ery'amateeka ery'okutuwa olukusa olwogeddwako mu Nsonga eno 7.
8. Obuvunaanyizibwa bwammwe
8.1. Temusaanidde kwenyigira mu Pologulaamu okugyako nga mugoberera amateeka gonna, ebiragiro, n'ennono ezikwatibwako. Mulina obuvunaanyizibwa obw'okwetegereza amateeka g'ensi yammwe n'okugagoberera, kubanga gayinza okuteeka obuzibu obw'enjawulo ku kwenyigira kwammwe mu Pologulaamu.
8.2. Mulina obuvunaanyizibwa obukwata ku bifo byonna eby'omusolo ebikwata ku kwenyigira kwammwe mu Pologulaamu, nga ekyo kisinziira ku nsi gye mubeeramu n'obwannansi bwammwe.
8.3. Okugezesa kwammwe tekusaanidde kuteganya oba okwonoona data yonna etali yammwe.
8.4. Temuteekwa kugabana bimu ku bikozesebwa oba ebintu ebitali bya mpisa.
8.5. Temusaanidde kumenya ddembe lya kibiina kyonna ekirala oba okwenyigira mu nkola yonna eyonoona eddembe ly'obwannannyini bw'abalala.
8.6. Temusaanidde kwenyigira mu nkola yonna etuusa akabi gye tuli, ku Pologulaamu, oba ku balala (omuli n'okusindika ebirus).
