Security
Reporting a vulnerability
We welcome good-faith security research. Here's how to reach us and what's in scope.
How to report
Email security@echobraker.com with the steps to reproduce, what you found, and how we can reach you. We aim to reply within 3 business days.
In scope
- The Echobraker browser extensions
- echobraker.com and api.echobraker.com
- Anything that could reveal a contributor's email, link an alias to a person, expose what readers browse, or let someone force a note to show
Please don't
- Access, change or delete other people's data beyond what's needed to show the problem
- Run denial-of-service or high-volume automated tests
- Use social engineering, or test against Reddit, Cloudflare or other third parties
Safe harbor
If you follow this policy, we won't pursue or support legal action against you for your research, and we'll credit you if you'd like.