Skip to content

Latest commit

ย 

History

History
106 lines (69 loc) ยท 2.39 KB

File metadata and controls

106 lines (69 loc) ยท 2.39 KB

Security Policy ๐Ÿ”’

Reporting a Vulnerability

Please do NOT open a public GitHub issue for security vulnerabilities.

How to Report

Send a detailed report to: etozheesusoff@gmail.com

Include:

  1. Type of vulnerability
  2. Location of the vulnerability
  3. Steps to reproduce
  4. Potential impact
  5. Suggested fix (if any)

Response Timeline

  • Acknowledgment: Within 24-48 hours
  • Initial Assessment: Within 1 week
  • Fix & Release: 2-4 weeks depending on severity

Supported Versions

Version Supported
1.x โœ… Yes
< 1.0 โŒ No

Security Measures

What We Do

  • โœ… Regular security reviews
  • โœ… Dependency scanning
  • โœ… Prompt vulnerability fixes
  • โœ… Security disclosures
  • โœ… Two-factor authentication on accounts
  • โœ… Limited access to sensitive files

What We Don't Do

  • โŒ No collection of personal data
  • โŒ No telemetry or tracking
  • โŒ No third-party analytics
  • โŒ No malware or backdoors

Security Best Practices for Users

When Using ALL-CONFIGS

  1. Always Backup - Keep original configs as backup
  2. Verify Integrity - Check file integrity after download
  3. Use from Trusted Source - Only download from official GitHub
  4. Keep Updated - Use latest version
  5. Report Suspicious Content - Tell us if something seems wrong
  6. Don't Share Configs - Only share public ones
  7. Review Changes - Check what configs modify

Known Security Limitations

  1. File Verification - We don't cryptographically sign downloads
  2. Automated Scanning - May not catch all issues
  3. Zero-days - Cannot prevent unknown vulnerabilities
  4. User Responsibility - Users should verify configs

FAQ

Q: Is ALL-CONFIGS a virus? ๐Ÿฆ  A: No. It's open-source code that anyone can review on GitHub.

Q: Does it collect my data? ๐Ÿ“Š A: No. It's pure config files with no tracking or analytics.

Q: Is it safe for VAC servers? ๐ŸŽฎ A: Yes. Configs are standard game settings, not cheats.

Q: How do I know it's legit? โœ… A: Review the code on GitHub, check community feedback, review on VirusTotal.


Acknowledgments

We thank the security community for responsible disclosure practices.


Your security matters to us ๐Ÿ›ก๏ธ

Report Security Issue