Apha, niya kufumana imiqathango nemigaqo ethe ngqo kubaThabathi-nxaxheba kweNkqubo yethu ye-Bug Bounty. Kufuneka le miqathango ifundwe kunye ne Imiqathango yoBambiswano eJikelele ngeeRhwebo (ii-“Imiqathango eJikelele”). Nawaphi na amagama achazwe asetyenziswa kule Miqathango yeNkqubo ye-Bug Bounty aya kuba nentsingiselo enikezelweyo kwiMiqathango eJikelele.
1. Intshayelelo
1.1. Le miqathango igubungela ukubandakanyeka kwenu kokuzithandela kwinkqubo ye-bug bounty ye-Deriv, enika inkuthazo kubabandakanyeka ukuba bafumanise kananjalo bachaze imingcipheko okanye ii-bug kwinkqubo ye-software okanye kumanethiwekhi e-Deriv, bafumane umvuzo wemali (“Inkqubo”). Ngokuchaza ukungakhuseleki okunxulumene nazo nayiphi i-web service ephethwe yi-Deriv kuthi, okanye ngokubandakanyeka ngandlela nye kwi-Inkqubo, niqinisekisa ukuba niyifundile kananjalo niyivumele le miqathango.
1.2. Niyavuma ukuba le Nkqubo ayilukhuphiswano kodwa yinkqubo yemivuzo yokulinga nesinokuyigqiba ngokwethu.
2. Isakhelo
2.1. Isakhelo seNkqubo sichazwe ngokweenkcukacha kwi-iphepha lewebhu leNkqubo. Ukuba anigqibi ukuba umxholo othile ukho na kwisakhelo seNkqubo, thumelani i-imeyili ku-security@deriv.com ukujonga phambi kokwenza nawaphi na amalinge okuvavanya.
3. Abathathi-nxaxheba abafanelekileyo
3.1. Aninakuthatha inxaxheba kule Nkqubo ukuba:
3.1.1. Umqashi wenu okanye umbutho enisebenzela kuwo awunivumeli ukuthatha inxaxheba kule mihlobo yeenkqubo;
3.1.2. Niqeshiwe okanye naye naqeshwa thina okanye nayiphi na eyeenkampani zethu zeqela;
3.1.3. Ningamalungu osapho olusondeleyo lomqeshwa okanye owayengumqeshwa wethu okanye nayiphi na eyeenkampani zethu zeqela.
3.2. Ukuba siyazi okanye sinesizathu sokukrokrela ukuba nifezekisa nawuphi na kwimigqaliselo engentla, sigcina ilungelo lokunikhupha kule Nkqubo nokurhoxisa nayiphi na intlawulo yebhawunti kuni.
4. Imivuzo enokubakho
4.1. Sigcina ilungelo lokugqiba ukuba ingxelo yobuthathaka enithumele iyafaneleka na umvuzo. Isigqibo sokuba kuhlawulwe umvuzo okanye kungahlawulwa sixhomekeke ngokupheleleyo kuthi.
4.2. Zonke izigqibo zethu ngesixa semali yembasa zigqibelele.
4.3. Imida yeembasa isekelwe kuhlahlo-lwazi kunye nokubaluleka kweenkcukacha ezichaphazelekileyo, ubulula bokusetyenziswa gwenxa, kunye nomngcipheko ophelele kubathengi bethu nakuphawu lwethu ukuba umngcipheko oxeliweyo ufunyaniswe ukuba ngumba wokhuseleko osemthethweni liqela lethu lezoKhuseleko.
5. Iimfuno zokungenisa i-bug
5.1. Isingeniso senu kufuneka silandele imigaqo elandelayo:
5.1.1. Nikezelani ngenkcazo epheleleyo yomngcipheko enixelayo ngawo, kuquka ukusetyenziswa gwenxa kunye nefuthe lawo.
5.1.2. Nikezelani ngobungqina kunye nenkcaso yawo onke amanyathelo afunekayo ukuphinda nenze isingeniso, anokubandakanya oku kulandelayo:
5.1.2.1. Iividiyo;
5.1.2.2. Izithombe-sikrini;
5.1.2.3. Ikhowudi ye-exploit;
5.1.2.4. Iilogi ze-traffic;
5.1.2.5. Izicelo neempendulo ze-Web/API;
5.1.2.6. Idilesi ye-imeyile okanye i-ID yomsebenzisi ye-akhawunti zovavanyo; kunye/okanye
5.1.2.7. Idilesi ye-IP esetyenziswe ngexesha lovavanyo.
5.2. Ukungafaki nayiphi na kwezi zinto zingasentla kunokubambezela okanye kubeke umngcipheko kwintlawulo yembasa.
6. Ukutyhilwa kolwazi olubucala
6.1. Niyavuma ukuba aniyi kuthetha ngemingcipheko efunyenweyo (nokuba sele isonjululwe) ngaphandle kweNkqubo ngaphandle kwemvume yethu ebhaliweyo.
6.2. Nizibophelela ukulandela imigaqo ye-Deriv yokutyhila. Ukuba nicinga ukuba nifumene umngcipheko wokhuseleko, nceda niwuxele ngenkcazo epheleleyo yomngcipheko ngokuvumelana nemigaqo yokungenisa ebekwe kwiCandelo 5 ngasentla.
7. Ilayisenisi
7.1. Nganeno koku, ninika ilayisensi engenambuyekezo, ehlawulwe ngokupheleleyo, engapheliyo, engenakurhoxiswa, ekhethekileyo, yehlabathi liphela, enokudluliselwa, nenokunikwa amalayisensi amancinci kuthi, malunga nawo nawuphi na umbiko nazo naziphi na iingxelo-mpendulo enisinika zona. Niyavuma ukuba sinamalungelo angenamda okusebenzisa umbiko kunye neengxelo-mpendulo. Sigcina ilungelo lokungasebenzisi nayiphi na okanye zonke izinto enisinika zona. Niyazirhoxisa nawuphi na umbuyekezo ngenxa yokubandakanywa kwayo nayiphi na imixholo kumbiko okanye nayiphi na ingxelo-mpendulo enisinika yona malunga neemveliso neenkonzo zethu.
7.2. Kananjalo niyaqonda kwaye niyavuma ukuba kusenokwenzeka ukuba siye saphuhlisa okanye sathumela umsebenzi wokwenza izinto ezifanayo okanye ezifana kanye nesingeniso, kwaye niyazirhoxisa naziphi na izibheno enokuba nazo ezivela kuyo nayiphi na ukufana nesingeniso. Niyaqonda ukuba anithenjiswanga mbuyekezo okanye imbeko ngenxa yokusetyenziswa kwesingeniso.
7.3. Niyangqina kwaye niyaqinisekisa ukuba isingeniso senu ngumsebenzi wenu, anizange nisebenzise ulwazi olungumnini wamanye umntu okanye iqumrhu, kwaye ninamalungelo asemthethweni okusinika ilayisensi kweli Candelo 7.
8. Iimbophelelo zenu
8.1. Akufuneki nithabathe inxaxheba kwiNkqubo ngaphandle kokuba ekwenzeni oko, niyathobela yonke imithetho, imigaqo, nemimiselo esebenzayo. Ninoxanduva lokuzazi imithetho yommandla wenu nokuyilandela, kuba isenokubeka imiqathango eyongezelelweyo kwinxaxheba yenu kwiNkqubo.
8.2. Ninoxanduva lweziphumo zerhafu ezinxulumene nenxaxheba yenu kwiNkqubo, ekuya kuxhomekeka kwilizwe enihlala kulo nakubuni-lizwe benu.
8.3. Uvavanyo lwenu alufanele luphazamise okanye lubeke emngciphekweni nayiphi na idatha engeyoyenu.
8.4. Akufuneki nabelane nawuphi na umxholo okanye izixhobo ezingafanelekileyo.
8.5. Akufuneki naphule amalungelo nawaphi na umntu wesithathu okanye nithabathe nayiphi na inxaxheba ephula ubumfihlo babanye.
8.6. Akufuneki nithabathe nayiphi na inxaxheba eyingozi kuthi, kwiNkqubo, okanye kwabanye (kuquka ukuthumela iivayirasi).