Pano, muchawana nyaya nemitemo zvinonyatsobata vatori vechikamu muBug Bounty Program yedu. Mitemo iyi inofanira kuverengwa pamwe neMitemo Yakazara yeVatengesi veBhizinesi (“Mitemo Yakazara”). Mazwi api neapi akatsanangurwa anoshandiswa muMitemo iyi yeBug Bounty Program anoreva zvakatsanangurwa muMitemo Yakazara.
1. Sumo
1.1. Mitemo iyi inobata kutora chikamu kwenyu nemoyo wenyu wese muchirongwa cheDeriv chebug bounty, chinokurudzira vatori vechikamu kuwana uye kushuma njodzi kana mabug ari musystem yesoftware kana network dzaDeriv zvichitsiva mubhadharo wemari (“Chirongwa”). Kana muchishuma njodzi inoenderana nemamwe emasevhisi epawebhu ane Deriv kana kuzvitora chikamu muChirongwa nenzira imwe, munobvuma kuti makaverenga uye makabvuma mitemo iyi.
1.2. Munobvuma kuti Chirongwa ichi hachisi mhiko asi chirongwa chekuedza uye chemibairo inosarudzwa nesu.
2. Mwero
2.1. Mwero weChirongwa unotsanangurwa zvakakwana paPeji reChirongwa. Kana musina chokwadi kuti imwe nyaya iri mukati memwero weChirongwa ichi, tumirai email kusecurity@deriv.com kuti mutarisise izvi musati maedza kuongorora chero chinhu.
3. Vatori vechikamu vanokodzera
3.1. Hamugoni kutora chikamu muChirongwa kana:
3.1.1. Muridzi webasa renyu kana sangano ramunoshandira harisi kukubvumirai kutora chikamu muzvirongwa zvakadai;
3.1.2. Muri kana makamboshandira isu kana chero kambani yepagroup yedu;
3.1.3. Muri hama yepedyo yemumwe mushandi kana aimboshanda nesu kana nechero kambani yepagroup yedu.
3.2. Kana tikaziva kana tine chikonzero chekufungira kuti munozadzisa chero imwe yezvinhu zviri pamusoro apa, tinoramba tiine kodzero yekukurambidzai kutora chikamu muChirongwa uye kudzosera shure chero mibhadharo yemubairo yamaipiwa.
4. Mibairo inogoneka
4.1. Tinoramba tiine kodzero yekusarudza kana mushumo wenjodzi wamatumira wakakodzera mubairo. Sarudzo yekuti tibhadhare mubairo here kana kuti kwete inoitwa nesu chete sezvatinoda.
4.2. Zvese zvatinosarudza maererano nemari yemubairo (bounty) ndizvo zvinopedzisira uye hazvichinji.
4.3. Mitengo yemubairo (bounty) inoenderana nerudzi uye unyanzvi hweruzivo rwakabatwa, kureruka kwekushandiswa kwedambudziko, uye njodzi yakazara kune vatengi vedu nemhando yedu (brand) kana dambudziko ramanyorwa richionekwa neAIG yedu yeSecurity sechokwadi chinodiwa.
5. Zvinodiwa pakutumira Bug
5.1. Zvamunotumira zvinofanira kutevedzera mirawo iri pasi apa:
5.1.1. Ipai tsananguro yakazara yedambudziko ramuri kumisa, kusanganisira kushandiswa kwaro nemhedzisiro yaro.
5.1.2. Ipai humbowo netsananguro yematanho ese anodiwa kuti dambudziko rigodzorerwe, izvo zvinogona kusanganisira:
5.1.2.1. Mavhidhiyo;
5.1.2.2. Mifananidzo yeSkrini;
5.1.2.3. Kodhi yekutyora masisitimu (Exploit code);
5.1.2.4. Magwaro ekushanyirwa kwewebhusaiti;
5.1.2.5. Zvikumbiro neMhinduro dzeWeb/API;
5.1.2.6. Email adhiresi kana user ID yemaakaunti chero api anoedzwa; uye/kana
5.1.2.7. Kero yeIP yakashandiswa panguva yekuedza (testing).
5.2. Kukundikana kusanganisira chero chimwe chezvinhu zviri pamusoro apa kunogona kunonoka kana kukanganisa kubhadharwa kwemubairo (bounty).
6. Kuzivisa ruzivo rwakakosha
6.1. Munobvuma kusataura nezvematambudziko akawanikwa (kunyange akatogadziriswa) kunze kweChirongwa (Program) musina mvumo yedu yakanyorwa.
6.2. Munozvisungira kutevedzera mirawo yaDeriv yekuzivisa (disclosure guidelines). Kana muchifunga kuti mawana dambudziko reSecurity, ndapota misai nechitsananguro chakakwana chedambudziko maererano nemirawo yekutumira yakataurwa muChikamu 5 chiri pamusoro apa.
7. Rezinesi
7.1. Nokudaro munotipa mvumo isina mubhadharo (royalty-free), yakabhadharwa zvakakwana (fully paid-up), isingaperi (perpetual), isingadzoreki (non-revocable), yakakosha (exclusive), yepasi rese (worldwide), inogona kutamiswa (transferable), uye inogona kupihwa vamwe (sub-licensable) maererano nechero gwaro (report) nechero mhinduro (feedback) yamunotipa. Munobvuma kuti tine kodzero isina muganhu yekushandisa gwaro nemhinduro iyoyo. Tinozvichengetera kodzero yekusashandisa chero chinhu kana zvinhu zvese zvamunotipa. Munosiya kodzero yekuwana muripo nekuda kwekubatanidzwa kwechero zvinyorwa mugwaro kana mhinduro yamunotipa maererano nezvigadzirwa nemasevhisi edu.
7.2. Munonzwisisawo uye munobvuma kuti tinogona kunge takatogadzira kana kukumbira kugadzirwa kwezvinyorwa zvakafanana kana zvakangofanana nezvamunenge matumira, uye munosiya kodzero dzamungave nadzo dzinobva mukufanana nezvamakatumira. Munonzwisisa kuti hamuna chokwadi chekuwana muripo kana kurumbidzwa pakushandiswa kwezvamakatumira.
7.3. Munoratidza uye munovimbisa kuti zvamunotumira ibasa renyu chairo, hamuna kushandisa ruzivo rwunova rwemumwe munhu kana sangano, uye mune kodzero dzepamutemo dzekutipa mvumo iri muChikamu 7 chino.
8. Zvamunosungirwa kuita
8.1. Hamufanirwi kupinda muChirongwa (Program) kunze kwekunge muchiita izvozvo muchitevedzera mitemo yese, mirawo nemagwaro ezvinodiwa. Ndimi munosungirwa kuzvizivisa pamusoro pemitemo yenyika yenyu nekuitevedzera, sezvo ingangove ine mimwe miganhu inowedzera panyaya yekupinda kwenyu muChirongwa.
8.2. Ndimi munosungirwa pamusoro pezvingangoitika panyaya yemitero inobva pakupinda kwenyu muChirongwa, izvo zvinoenderana nenyika yamunogara nekuti muri mugari wenyika ipi.
8.3. Kuedza (testing) kwenyu hakufaniri kukanganisa kana kutadzisa chero ruzivo rusiri rwenyu.
8.4. Hamufaniri kugovana zvinyorwa kana zviri zvose zvisina kufanira.
8.5. Hamufanirwi kukanganisa kodzero dzechero mumwe munhu kana kuita chero chiito chinotyora rusununguko rwevamwe.
8.6. Hamufanirwi kuita chero chiito chinokuvadza isu, Chirongwa, kana vamwe (kusanganisira kutumira maviruzi).
