Skip to content

Security

Found something wrong? Tell us.

A bug in the terminal, or a way into something that should be closed. Both come here, and both are read by a person.

What are you reporting?

What you saw, and what you expected instead.

The steps, in order. The shorter the better.

The terminal's, as it shows in Settings (for example 0.1.3).

Optional. Only if you want an answer.

How we handle a report

  • Reports go to a private store. Nobody can list or read them from outside, and a vulnerability is never published.
  • The notice we receive carries the severity and the title, never the details.
  • If you reported a vulnerability, we write to the address you gave.
  • Please do not use a hole to read other people's data, change it, or degrade the service, and keep it to yourself until it is fixed.

What counts

The terminal, the accounts and licence service, the data engine and its datasets, and this website. Reports about anything else cannot be acted on.