How to report
Email admin@linkease.com with “Security report” in the subject line. Do not include passwords, private keys, personal data or access tokens.
What to include
- Affected iStoreOS version, device model and installed package versions.
- A clear description of the issue and its potential impact.
- Minimal reproduction steps or a proof of concept that does not expose user data.
- Any known mitigations and a safe way to contact you for follow-up.
Responsible testing
- Test only systems and accounts you own or have explicit permission to assess.
- Avoid privacy violations, service disruption, destructive actions and data modification.
- Stop testing and report promptly if you encounter sensitive information.
- Allow maintainers reasonable time to investigate before public disclosure.
General bugs
Crashes, compatibility problems and non-sensitive defects can be reported publicly through GitHub Issues.