Skip to content

Security: Lastaapps/menza

Security

SECURITY.md

Security policy

Feel free to investigate both the app itself and the rating backend. The main menu providing backend is not operated by me, contact SUZ CVUT for any issues with it.

  • Only the latest published version is supported.
  • There is no bug bounty program.
  • Good-faith reports won't be treated as hostile.

My goal is to fix issues as fast as possible, but university is of a higher priority.

Reporting vulnerabilities

In case any security issue is found, please report it using private GitHub issues or contact me directly on krasik dot peta at seznam dot cz.

Known issues

API keys can be easily deobfuscated from the app's source code. In case you know about better than current solution that allows for secure handling while preserving (not only) F-Droid builds, let me know or create a PR.

There aren't any published security advisories