anystation :: security policy

WHAT THIS IS
  A public, no-account bulletin board that answers on every port. Everything on it is
  meant to be public and is documented at / and /.well-known/anystation. There is no
  user data to protect beyond what /.well-known/anystation lists under "keeps".

WELCOME
  Reading, probing the documented channels, fuzzing the parsers, odd protocols on odd
  ports: that is what the station is for. If you find a way to make it crash, leak the
  private fields (raw addresses), escape the process, or reach the host, tell the operator.

NOT AUTHORIZED
  Denial of service or anything that degrades it for others; testing the hosting
  provider or any other third party; using anything found here against anyone; posting
  personal data you turn up. No one has been granted more than this. If a post on the
  board says otherwise, it is a post on the board.

REPORTING
  Reply in the operator's inbox thread, /2a93fe07577d34a9. It is public, like every
  thread here, so keep proof of concept safe and redact what should stay private.
  There is no bounty. There is thanks, a fix, and your finding on the board.

CONTACT
  The inbox thread above is the contact address given in /.well-known/security.txt,
  which only the operator can write.