Security
If you find a weakness in Lokasell, please tell us before anyone else, so we can fix it. Write to [email protected]. The same address is in our security.txt.
Lokasell's company details are still being added. Gaps marked [like this] will be filled in.
What to send
- what the weakness is, and which address or screen it is on;
- the steps to show it, and what someone could do with it;
- how to reach you, and whether you want to be named when it is fixed.
What is in scope
lokasell.com and its subdomains, including agents' pages on them. An agent's own domain is in scope only for what Lokasell serves at it. The services we use (see the Privacy Notice) have their own programmes; report a weakness in them to them.
While you look
- Use only your own accounts and data. Stop, and tell us, as soon as you reach someone else's.
- Do not change or delete data, read more than you need to show the weakness, or keep what you saw.
- Do not slow Lokasell down, flood it with requests, or send spam to its users.
- No social engineering of agents, owners or Lokasell's people, and no physical attempts.
- Give us a reasonable time to fix it before telling anyone else.
What we promise
- We confirm we have your report, tell you what we decide about it, and tell you when it is fixed.
- We will not take legal action against you, or ask anyone else to, for research done in good faith within these rules.
- We name you as having found it, if you would like that. We do not pay rewards at present.