News Summary

The Nivenly Foundation, a nonprofit committed to governance in open source projects, has introduced a security fund to enhance the security of the fediverse, a decentralized network of apps like Mastodon, Meta’s Threads, and Pixelfed. This initiative aims to reward individuals who responsibly disclose security vulnerabilities affecting fediverse apps and services. The fund offers payouts ranging from $250 to $500 based on the severity of the vulnerabilities. The program is currently in a limited trial following a security issue discovered in Pixelfed, showcasing the need for improved security practices among independent server operators. This effort also includes educating project leads on the importance of responsible disclosure practices to prevent exploits by malicious actors.