Omarchy has launched an official bug bounty program on HackerOne backed by a $100,000 bounty pool funded by the Omacom Foundation. Security researchers who find verifiable vulnerabilities can submit reports through HackerOne to follow remediation progress and receive payment, or they can report privately via [email protected]; full reporting criteria and scope are listed on the security page. Using HackerOne standardizes submission and payout, and gives the Omarchy Security Team a managed triage workflow to handle incoming reports efficiently.
To lead security efforts, Mehmet İnce is joining Omarchy Core as Head of Security, elevating his previous role on the security team to set overall direction for building security into releases and operating the bounty program. The move signals a formalization of security processes and a commitment - supported by patrons - to invest real resources in hardening the system. The announcement emphasizes operational readiness for receiving and fixing vulnerabilities and frames the bounty and leadership hire as steps to make Omarchy both secure and robust going forward.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
YouTuber Anthony Sistilli built a camera to track police cars using license plate recognition technology and posted videos about it. Police officers visited him to inquire about his intentions, highlighting concerns over surveillance and privacy. (gizmodo.com)
Tanker attacks in the Strait of Hormuz have reached their highest level since the war began, with eleven ships attacked in the past week. Iran is escalating these attacks to disrupt a rebound in Middle Eastern oil exports, which are now near prewar levels. (cnbc.com)
The United Nations has issued a warning about the development and potential misuse of technology capable of reading citizens' minds. The technology raises significant privacy and ethical concerns globally. (nytimes.com)
Let's Encrypt will issue certificates with a default lifetime of 64 days starting February 2027, down from 90 days. The change aims to enhance security by reducing the risk of key compromise and mis-issuance. (letsencrypt.org)
Platforms may face conflicts between hosting live streams of violent events like executions and adhering to their own content policies. The Pentagon's plans to livestream a military execution could challenge existing rules on violent content, especially on platforms like X, which have flexible policies on graphic media. (techdirt.com)
The US announced sweeping sanctions on the International Criminal Court, aiming to dismantle the institution and defend US sovereignty. The ICC condemned the measures as an assault on the rule of law and international legal order. (bbc.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.