Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Notices by Jos Poortvliet (jospoortvliet@fosstodon.org)

Embed this notice
Jos Poortvliet (jospoortvliet@fosstodon.org)'s status on Saturday, 08-Mar-2025 12:31:05 JST Jos Poortvliet
- Frank Karlitschek
- bert hubert 🇺🇦🇪🇺🇺🇦
@bert_hubert @niels @Karlitschek I don't know what this is, but if it is/was decided at company level to send info on user profiles to us, I'm pretty sure I'd know about it. And I don't. Nor did we change our ToS because we don't have one 🤔
Buuuut bugs exist. And there are 300 apps in our app store that we can't all check line by line. So I assume this could be a security issue. Please, @niels could you report this with the logs to our security team? Use hackerone.com/nextcloud
In conversation about a month ago from fosstodon.org permalink
Attachments
1. Domain not in remote thumbnail source whitelist: profile-photos.hackerone-user-content.com
  
  Nextcloud - Bug Bounty Program | HackerOne
  
  The Nextcloud Bug Bounty Program enlists the help of the hacker community at HackerOne to make Nextcloud more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited.

User actions

Jos Poortvliet is co-founder and Communications Director at Nextcloud, the open source, privacy-focused collaboration software company. He is a long time technology enthusiast and all-things-open evangelist. He has previously been community manager at SUSE & worked as business consultant at government, finance and telecom companies in the Netherlands. He is based in Berlin and loves cooking for friends, family and colleagues. Is also nurturing a bit of a boot 🥾 and hat 🎩 obsession.

Tags