Security
Found something wrong? Tell us.
A bug in the terminal, or a way into something that should be closed. Both come here, and both are read by a person.
How we handle a report
- Reports go to a private store. Nobody can list or read them from outside, and a vulnerability is never published.
- The notice we receive carries the severity and the title, never the details.
- If you reported a vulnerability, we write to the address you gave.
- Please do not use a hole to read other people's data, change it, or degrade the service, and keep it to yourself until it is fixed.
What counts
The terminal, the accounts and licence service, the data engine and its datasets, and this website. Reports about anything else cannot be acted on.