reply on: What would you do, if you were in the team behind SN? \ stacker news ~meta

pull down to refresh

0 sats \ 13 replies \ @WeAreAllSatoshi 30 Apr \ parent \ on: What would you do, if you were in the team behind SN? meta

It's on the footer of every page. You can report vulnerability securely there, too: https://github.com/stackernews/stacker.news/security

100 sats \ 12 replies \ @holonite 30 Apr

Thanks! I found some ettercap, HTTP mistakes and XSS vulnerabilities. I’ll report them right away! :)

0 sats \ 11 replies \ @WeAreAllSatoshi 30 Apr

cc @ek fyi

100 sats \ 10 replies \ @ek 30 Apr

Thank you.

All information regarding how to do a responsible disclosure should be in our README here, in the FAQ or here. I thought these are pretty common locations.

@holonite, where did you look? Where should we put it such that people can find it?

0 sats \ 9 replies \ @holonite 1 May

I was initially planning to DM you with these but now I'll upload it via GitHub. I think there should be another page link in the SN header as a pinned post for 7 days in suppose glowing neon saying "Beginners here!" for accounts that are not atleast 1 week old. I will include other ideas in the GitHub issue.

100 sats \ 8 replies \ @ek 22h

Is this your critical report? If so, that wasn't a responsible disclosure as described in the three links I sent you.

100 sats \ 0 replies \ @WeAreAllSatoshi 22h

And the link I shared to the security advisory page on the GH repo

reply on another page

34 sats \ 1 reply \ @WeAreAllSatoshi 22h

lol, after all that

view all 1 replies

0 sats \ 4 replies \ @holonite 22h

you sent me 3 links? where?

view all 4 replies