ByteSizedSecurity is a static blog built with Jekyll and hosted on GitHub Pages. It provides cybersecurity insights, analysis, and educational content for security professionals and enthusiasts.

• Static Site Generator: Jekyll
• Hosting: GitHub Pages
• Styling: Tailwind CSS (via CDN)
• Newsletter: SendFox
• Syntax Highlighting: Highlight.js

Since this is a static website with no backend, database, or user authentication, the attack surface is limited. However, we still take security seriously.

• Cross-site scripting (XSS) vulnerabilities in rendered content
• Sensitive data exposure in the repository
• Misconfigurations that could impact site integrity
• Third-party dependency vulnerabilities
• Issues with external integrations (newsletter forms, etc.)

• GitHub Pages infrastructure (report to GitHub directly)
• CDN-hosted libraries (Tailwind, Google Fonts, etc.)
• Social engineering attacks
• Denial of service attacks

If you discover a security vulnerability, please report it responsibly.

Email: marc@bytesizedsecurity.show

Please include:

• A clear description of the vulnerability
• Steps to reproduce the issue
• Potential impact assessment
• Any suggested remediation (optional but appreciated)

• Acknowledgment: Within 48 hours of your report
• Initial Assessment: Within 7 days
• Resolution Timeline: Depends on severity, typically within 30 days
• Credit: We're happy to credit researchers who report valid vulnerabilities (unless you prefer to remain anonymous)

• Publicly disclose the vulnerability before we've had a chance to address it
• Access, modify, or delete data that doesn't belong to you
• Perform any testing that could degrade the site's availability

• No sensitive data stored in the repository
• Regular dependency updates
• Content Security Policy considerations
• HTTPS enforced via GitHub Pages

Thank you for helping keep ByteSizedSecurity safe! 🛡️