隱私、資料與安全
Security, Account Protection and Vulnerability Reporting Policy
Security expectations, prohibited abuse and a responsible path for reporting vulnerabilities.
最後更新： 2026年9月2日
適用對象： All visitors and users
重要提醒： 本文件是產品政策與風險管控聲明，並非針對個人的法律意見。它不代表放棄任何不得拋棄的權利，也不應被解讀為所列的每一部法律都適用於每一個司法管轄區。
Security baseline
- Use least privilege, secret separation, rate limits and repository-enforced infrastructure boundaries.
- Do not expose internal state services or credentials publicly.
- Preserve auditability for security-relevant changes and incidents.
Research and reporting
Good-faith vulnerability reports should describe the issue and reproduction safely without accessing unnecessary user data, persistence, extortion, destructive testing, credential harvesting or disruption. Authorization for security testing is not implied by this policy.