Security Radar 29

[gratipay-bot]

← Security Radar 28

---

Docs

http://inside.gratipay.com/howto/sweep-the-radar

Mission

The mission of the security team is to protect our sensitive information.

Scope

• our HackerOne account
• the "Handle Security Issues" document
• Security Team issues
• the legacy Hall of Fame page on gratipay.com
• the @gratipay/security team
• the https://github.com/gratipay/security repo
• the [email protected] email address

Queue

Unclear Risk

https://hackerone.com/reports/117195
https://hackerone.com/reports/161766

Severe Risk

Moderate Risk

https://hackerone.com/reports/127218
https://hackerone.com/reports/128844
https://hackerone.com/reports/143139

Mild Risk

https://hackerone.com/reports/76304
https://hackerone.com/reports/80907
https://hackerone.com/reports/90805
https://hackerone.com/reports/108645
https://hackerone.com/reports/109161

https://hackerone.com/reports/111325
https://hackerone.com/reports/117187
https://hackerone.com/reports/117739
https://hackerone.com/reports/117984
https://hackerone.com/reports/118023

https://hackerone.com/reports/123688
https://hackerone.com/reports/123697
https://hackerone.com/reports/128121
https://hackerone.com/reports/140387

https://hackerone.com/reports/140432

Theoretical Risk

https://hackerone.com/reports/78151
https://hackerone.com/reports/90777
https://hackerone.com/reports/116147
https://hackerone.com/reports/117833
https://hackerone.com/reports/123942

https://hackerone.com/reports/123897
https://hackerone.com/reports/124096
https://hackerone.com/reports/127824
https://hackerone.com/reports/127949
https://hackerone.com/reports/127995

gratipay/gratipay.com#823
https://hackerone.com/reports/137002
https://hackerone.com/reports/138693
https://hackerone.com/reports/143139

https://hackerone.com/reports/161765

[ghost]

Starting to process the queue again after a week of just-finished-the-school related stuff. Nothing new under the radar except a content spoofing (yay). I'll finally have some time to preen the new policy.