<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>A Deep Dive Into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2409.07670/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:16:22 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2409.07670/feed.xml" rel="self" type="application/rss+xml" /><item><title>A Deep Dive Into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports — mentioned by fph</title><link>https://news.ycombinator.com/item?id=44899669</link><guid isPermaLink="false">urn:hackerpapers:mention:2409.07670:44899669</guid><pubDate>Thu, 14 Aug 2025 12:37:07 GMT</pubDate><description>&lt;p&gt;I don&amp;#x27;t claim to have first-hand experience, that was just a suggestion. But there is a recent study on how maintainers respond to bug bounties here: https://arxiv.org/abs/2409.07670 .&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2409.07670/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.SE</category></item></channel></rss>
