Page
Security
If you've found a security problem with andrewshell.org, thank you. Please tell me privately before you share it anywhere else.
How to report
Email security@andrewshell.org and include:
- what you found and where (the URL, request, or page)
- the steps to reproduce it
- what you think someone could do with it
I'll reply within a week to confirm I've got it, and I'll keep you posted while I work on a fix.
What's in scope
- andrewshell.org, including its ActivityPub, webmention, and feed endpoints
- Geekity CMS, the software that runs this site. I maintain it, so problems in the software itself are welcome here too.
Third-party services the site links to or federates with are out of scope. Please report problems with those to their operators.
Please don't
- access, change, or delete other people's data, beyond the minimum you need to show the problem
- run denial-of-service attacks, spam, or high-volume automated scans
- use social engineering or physical attacks
In return
If you act in good faith and follow this page, I won't pursue legal action or file complaints against you. I'll credit you when the fix ships, unless you'd rather I didn't. This is a personal site, so I can't offer a bug bounty, just my thanks.