https://centralfloridaadu.com/security/Recent content in Securities on Central Florida ADU AuthorityHugoen-usThu, 30 Apr 2026 15:30:15 -0400https://centralfloridaadu.com/security/acknowledgments/Thu, 30 Apr 2026 00:00:00 +0000https://centralfloridaadu.com/security/acknowledgments/<p>Researchers who have responsibly disclosed security issues affecting <code>centralfloridaadu.com</code> are recognized below.</p> <h2 id="2026">2026</h2> <p><em>No acknowledgments yet.</em></p> <h2 id="how-to-be-listed">How to be listed</h2> <p>Report a vulnerability under our <a href="https://centralfloridaadu.com/security/policy/">disclosure policy</a>. With your consent, we will list your name or handle, the date of disclosure, and a brief description of the issue category. Specifics are withheld until any active risk is mitigated.</p> <p>We will not list anyone without their explicit permission.</p>https://centralfloridaadu.com/security/policy/Thu, 30 Apr 2026 00:00:00 +0000https://centralfloridaadu.com/security/policy/<p>This policy covers <code>centralfloridaadu.com</code> and its subdomains. The operator welcomes reports from security researchers and treats all good-faith reports seriously.</p> <h2 id="scope">Scope</h2> <p>In scope: <code>centralfloridaadu.com</code> and any subdomain operated by this site, except where explicitly excluded.</p> <h2 id="out-of-scope">Out of scope</h2> <ul> <li>Denial-of-service attacks of any kind, including resource-exhaustion testing</li> <li>Social engineering of operators, contractors, or third parties</li> <li>Physical attacks against infrastructure</li> <li>Reports from automated scanners without manual validation and reproducible impact</li> <li>Third-party services we depend on but do not control (Cloudflare, GitHub, Porkbun, Proton). Report those upstream.</li> <li>Vulnerabilities in unmodified upstream dependencies — report upstream and notify us if relevant</li> <li>Issues requiring a privileged position on the local network or the victim&rsquo;s device</li> <li>Missing security headers without demonstrated impact</li> <li>Reports based solely on tool output without exploitation evidence</li> </ul> <h2 id="how-to-report">How to report</h2> <p>Email: <code>security@centralfloridaadu.com</code></p>