Responsible disclosure

Found a vulnerability on CyberSphere? Please report it responsibly — this blog preaches security, so it has to practice it.

How to report

Write to contact@cyber-sphere.net with a description of the issue, reproduction steps and the estimated impact.
The contact point is also published in /.well-known/security.txt (RFC 9116).
We acknowledge reports within 72 hours.

Ground rules

Don't access, modify or delete data that isn't yours; use your own test accounts.
No denial of service, spam or social engineering.
Give us a reasonable window to fix the issue before any publication.
In return: no legal action for good-faith research that follows these rules, and public credit if you'd like it.