Security
Report a security problem脆弱性の報告
I do bug bounties myself, so I'm glad when someone tells me about a weakness. Thank you for reporting responsibly.
In scope
- slettvold.org and everything under it
- The Oni Dojo apps (Android and Windows) and their server functions
How to report
Email tommy@slettvold.org or use the contact form. Describe what you found, how to reproduce it and what an attacker could do with it. English, Norwegian or Japanese are all fine. I'll answer within a few days and keep you updated until it's fixed.
Please
- Don't access, change or delete other people's data; use your own test account.
- No denial-of-service, spam, social engineering or physical attacks.
- Give me a reasonable time to fix it before you talk about it publicly.
This is a one-person project, so there is no paid bounty, but I'll gladly thank you by name here if you'd like. The machine-readable version is security.txt.