diff --git a/docs/SECURITY.md b/docs/SECURITY.md index 1dfa8fb..9dcf840 100644 --- a/docs/SECURITY.md +++ b/docs/SECURITY.md @@ -9,6 +9,7 @@ We will investigate legitimate reports and make every effort to quickly resolve ### Eligibility and Responsible Disclosure Only those that meet the following eligibility requirements may receive a monetary reward: + - You must be the first reporter of a vulnerability. - The vulnerability must be a qualifying vulnerability. - Any vulnerability found must be reported no later than 72 hours after discovery. @@ -27,14 +28,64 @@ You must ideally do all the testing locally using the appropriate repositories f ### Contact -- Mail: security@hack4impact.org +- Mail: - Preferred languages: English - If your issue is critical, you can use the PGP key below to encrypt your message ``` -----BEGIN PGP PUBLIC KEY BLOCK----- -TODO: Add PGP Public Key -----END PGP PUBLIC KEY BLOCK----- + +mQINBGi2SocBEADZAcwjmFgb7Khe1Vb1FIfWQ/Pu8/2CT49TTFs3avaKlP/82KlV +ZXdOVUofVQe5WnJM7KHwuEDLT1Z4Jfqe9jIZ1cQQcrBI4XPX2Cm0yfFgeUm/40qi +544zrOx9c1AgqXHqY6/9aHVvgbjLJ0IPlSGJZirnvHf7ebAvlvMSVL5POQqjtjPg +IMdsE0zIw3P07ovy1Pe13aal5lFCrMbRlHdsiLa7RntklfxFbadC/C/OwlnKUp2V +BwpVNpZkB+XmPM7kKLR3kwum/VPPNDA5HsmP9vj7tS83UYMZBP+7V7Mk9nf7XjPt +WBMfhZJL09AAvDbqz0Roimx9jA0PQc4t4rw1uxOVhZNGhyHbevaq+NLxPCade9h9 +UG1jIJpXH75V+iF6nTrM6xV30kfy5jmObDt7E5sW6scZswjN8Pp4i8g3kjrwkveq +rLtomXpXCA/hSls9ZdHxJX6jjnCbsAOjm+qk7rVE9UkpDwtQMjnOZpZkhCSd/h7n +7z0cChkLpPEl4wrgvXqHn1rVTU8MuiTiMKl57JjkZYTg6qffGWHkDEoQt1koKlGp +k/mtXbDSDjAVJ7v68SlE17G9JrfRqHSzTedgLJXAyd5wDJhDjLTddksH9l1RpqAM +gLnAJK51A3umaG5XncYbnia5WPfFuRhY0FnVhdNO6g5ZMjVf+/dWVPQHCwARAQAB +tG5IYWNrNEltcGFjdCAoVGhlIGtleS1wYWlyIGZvciBzZWN1cml0eSBjb21tdW5p +Y2F0aW9ucyBpbiBIYWNrNEltcGFjdCByZXBvc2l0b3JpZXMuKSA8c2VjdXJpdHlA +aGFjazRpbXBhY3Qub3JnPokCVwQTAQgAQRYhBIUbbepCkFpRRhvp3HFBBcakxLkS +BQJotkqHAhsDBQkDwmcABQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEHFB +BcakxLkShDIQAM8m/YeSDG26g8ARI+G/chGI1ayM9YoZFL+dH5vKtVqdHc5NnJWr +0gzKINWWCubDTJb6tuZVDDMhEzX9HYOZ4cM8ur38V7TQQrVi32UA1zgJDhTRFu2f +vEPzxZfgbISbDiwFpgdILLtMD0j3KLtK2PmByyI9xtxbdHqjDXGQJQjwdL5avfUc +UPJS88bKy41o+CvvkXsMv/auazMLtbJLdkqhuq2SyUoDzsCUevn29R3uIbfOVaCd +wRGRVgcfGIun010lv/NOnuSIMnrEGbfcxPMRVgg6sK+xzVw8qiEJqqh9huwTdumc +pSsLkBQETz+gYVNzv0D6Bp5DOIG2NxX4gotsonGc0zGXtoE5DE6S5roNPsfivKWU +jSq7C2YAtpgPp+czfwrFDskOwDWA1ySKzk0peu3DUJI9SWrMqtMQIZYhWoZC0NHi +vmjlt6OVgvSL+blART5MPT6Rl9X2ntpzkZzGAP9W84fcrAaYuB8+tSXYxVaj5Jrs +7UPAcbz/RKgzTqs2N5sM6UzYpKrJ86uvlNndCapqE4fqXpoR6mctYIufyQI8rnBk +3GBdaNhYN6aQ+cKFdG07UPMw74zHsryT9vL7xMHL/KBe0dWF9EWUkNatj/VnM9bA +jcIKYaMzZel+OVBrLdCMdzFQ8ZJAFIDy+F6u3ele8ynO280Ydb8Jc8SmuQINBGi2 +SocBEAC64FvmwiqLqFsAk4uJaFr6+idyYVa4/fPX1o1WqJFCkUuFqkZO0PMR6TNM +vpseWvr2Mz9+YCs73LktmOFuZ1P8MgZCOpCIjw6eb4g1dBMKZDbBWFs0nN1cWWXT +H4x+MPB1S9/5wMGRZ6Fj+GyfoWyjolnaGHt76IxgxU3gEwNtmVkjdoEAKIp2Pm8n +EJ3C4LHtt7r2WeWWnQSUQmG/hLrq8ds9lbWq5Amm6J2Kn+mqgP02krkjEAf3L3+S +/ALoHCZUaZOGIX3TZXysqM0nfeRqaXmI9i7TMFc25gNYnIhKbs3af8pqYW02KwLh +G2H0+qX8cHqyYtO93xddP/teprthImE9qRLwPYQ+JEC2gwczoe2VQEmQxySkLV64 +uXR4qp/7ZMCTuO7amibSOwcJFF66yLNjDruImH45TYB7HkWMe9cCWTyPchPeh74Q +G60Qc4XTClGGtwd1bKS2rY20RHccquAwH4rNHdYnrC3XshVJeu/EnEUsJlfhtll0 +HcZ7pk0Octl4vF9LAigNtscQLeUXdxUsfe9ACjAl6Z4NjuNalIIHmaWCLGjqk0n9 +oV/kfu6fezR6oBNLwTwEtnJ4EnnSHunuEYCUCOa0x2CVp2kR7zDXnYEZnkTGE2z1 +1eH6RRvmzKdoxXWnx3AJSHGNr2z959HHVd+FAcCzhP8qIx5CDwARAQABiQI8BBgB +CAAmFiEEhRtt6kKQWlFGG+nccUEFxqTEuRIFAmi2SocCGwwFCQPCZwAACgkQcUEF +xqTEuRIzCg/7BwInLzyOiNuBNPleeo/EL8iPUyDqW/2aDLTWcvGNI6fTJfdNAnJp +Qbyy4N3i8+SLfNYua57cz51A8j0ndK5K8nsUSGHCi8jXi1rbVADruKca9WOQr0yf +VkxTbNfUTeJ2XNTvcthOrOibepmJJ+GGUTzy6+NEVOpPrkrkhvwFI27tEzuI4LyO +CZfhDhkJvtXbeY/ezMSF8FbdBI7wLa1v4zAGLt9fDzU6IaEYa4izNtBF6rBkw6Vc +fWuq5v9JJBNJbAT/gPhB9twXDUbr+LwGTtnMmNQSsUohVORsxksDrQCzvdN/YNVH +PYzaiJ/F09lEC2Hd8fUsfo3FxjUefjyzBXJw3Zyhk+GuS8cNVCduWbMql8nhyyvc +Nc/clpLHOVjWwxDxZYpUOMUCjWklGee+6fI/B6p8iHEp4LNq1C0hPDG5cGwUKX6y +zeB08LpATBrYoB1d1dVdxb2ytTvKLVTRUs1gS8ejawuA/lwlpnRjshH+kyaBOcjk +gOTW4/nCb7jvrYEbpcmYNX6byvIMGruyudOh9c0ckqYjZIUhqIvpokT4/fDtcnGC +VUKsoGpvHV9wtxW9rbYnf78KNkSXakvyVLNV89NxRZnNv3rsmmXlT/eNQImlbUqB +RHNiDMasjiV9YcdZO3WU8O2GEt4fAcPt1flOh0hnVQHznS0QgjnScVU= +=Vh3v +-----END PGP PUBLIC KEY BLOCK----- ``` ### Rewards