Responsible disclosure
Security is our job; so is securing our own house.
We take the security of this site and our services seriously. If you're a security researcher and find a vulnerability, we'd appreciate a responsible report.
How to report
Write to soporte@lotek.cr with the subject "Security report". Please include:
- A description of the vulnerability and its potential impact.
- Steps to reproduce it.
- Any proof of concept that helps us understand it.
Our commitment
- We acknowledge your report within a reasonable time.
- We work on the fix and keep you informed.
- We won't take legal action against good-faith research that respects this policy.
What we ask
- Don't access or modify data that isn't yours.
- Don't degrade the service (no denial of service).
- Give us reasonable time to fix before public disclosure.
Security contact information is also published at /.well-known/security.txt.