__  ___________     ______      __                         __  _
   /  |/  /  _/ __ \   / ____/_  __/ /_  ___  _________  ___  / /_(_)_________
  / /|_/ // // /_/ /  / /   / / / / __ \/ _ \/ ___/ __ \/ _ \/ __/ / ___/ ___/
 / /  / // // _, _/  / /___/ /_/ / /_/ /  __/ /  / / / /  __/ /_/ / /__(__  )
/_/  /_/___/_/ |_|   \____/\__, /_.___/\___/_/  /_/ /_/\___/\__/_/\___/____/
                          /____/
        

Responsible Disclosure Program

If you believe you have discovered a potential security vulnerability, we encourage you to let us know as soon as possible.

We will work with you to confirm the issue and take appropriate steps to protect the MIR Cybernetics community.

Because making vulnerabilities public could put everyone at risk, we ask that you keep this information confidential until we can address the issue.

Reporting a Vulnerability

Please report all perceived vulnerabilities by email to frphevgl@zveploreargvpf.pbz To aid our review, please include as much detail as possible in your report.

Guidelines for vulnerability reporting

As you investigate and report a potential vulnerability on a mircybernetics.com or galaxiesofeden.com domain or subdomain, please adhere to the following guidelines:

• You are at least 18 years of age or have your parent or guardian’s permission to contact us.
• Do not break the law.
• Do not use high-intensity or destructive tools to find the vulnerabilities.
• Do not attempt to execute a denial of service attack.
• Do not take actions that affect the integrity or availability of the services. If you notice any service degradation while testing, please suspend use of the tool immediately.
• Do not test third party websites, applications or services.
• Do not use social engineering or phishing techniques.
• Do not share, compromise or disclose any personally identifiable information.
• Do not conduct tests on accounts that do not belong to you without explicit written consent from the account owner.
• Do not access or modify an account without the explicit written consent of the account owner.
• If you inadvertently access another person’s data without authorization, you must stop any activity that could result in further access.
• Allow us a reasonable opportunity to investigate and respond prior to contacting anyone else about this matter.

Non-qualifying issues

Please do not report the following issues:

• Phishing or social engineering techniques.
• Disclosure of known public files or directories.
• Username enumeration via error messages.
• Missing HTTP security headers.

Rewards

You must be at least 18 years old to be eligible to receive any compensation.

Currently, we don’t offer any monetary compensation but following rewards are available depending on the severity of the vulnerability:

• In-Game titles (“Hacker”, “Elite Hacker”)
• Lifetime Premium Subscription to our MMORPGs
• Publicly available Hall of Fame listing

Please note that vulnerabilities that are deemed non-critical might not be eligible for rewards.

Thank you for helping us keep MIR Cybernetics community safe!