How To Report A Security-Sensitive Issue or Finding

You found a bug or weakness that a badguy could exploit? You see where we don't protect our application and our information? Let us know.

For security-sensitive findings, please DO NOT use Git Hub issues tool, as that may give badguys the information to attack when previously they hadn't discovered the weakness you did.

Instead, please email David with the details. This will ensure we can coordinate disclosure with fixing the issue, and it ensures we can give you the credit for finding this.