Paying Tomasz Wasilczyk for security improvements

[Tomasz Wasilczyk]

2013/3/5 Mark Doliner <mark at kingant.net>:
> On Sat, Mar 2, 2013 at 5:56 PM, Tomasz Wasilczyk
> <tomkiewicz.groups at gmail.com> wrote:
>> We (I mean, me and someone from Google) clarified some aspects of this
>> agreement. At first, Google won't direct the work - it's up to IMF to
>> decide, what is important in the context of improving security. Still,
>> they will be happy to discuss or advise on the work. I think it will
>> be kind, if I will address every issue they point out at first place.
>
> I think the next step is for us to determine an appropriate list of
> tasks for you to work on.  The only one on my list is:
> - Evaluate current master-password branch, merge in changes from main,
> finish anything that needs finishing, merge into main.  (I'd prefer
> these changes not go into 2.x.y... but it's certainly open for
> discussion if people think that's a good idea.)

I don't think, there is a need to make an effort to prepare a more
complete list - I think this task plus a spreadsheet (I saw, that you
have access to it too) from Google is a good candidate to start from.
Completing half of these will take enough time, so new tasks will come
up.

Tomek