Hacking, Ethics & “Don’t Be That Guy”

If you landed here by trying /admin, that’s… predictable. Bots and opportunists hammer /admin all day long.

The ethical line

  • Testing your own systems: fine, recommended.
  • Testing someone else’s system without permission: not fine, often illegal.
  • Accessing data you shouldn’t: absolutely not fine.

Curiosity is useful. Consent is mandatory.

If you’re a legit security researcher

Thank you. Please use responsible disclosure:

  • Describe the issue at a high level
  • Include steps to reproduce (without exploiting further)
  • Never access or download real user data

If you submitted the disclosure form, we’ll respond if it’s actionable.

For actual staff

The admin area is not /admin. It’s /office.

If you’re staff and you can’t access it, contact the site owner instead of guessing URLs.

Go to /office

FYI: access attempts to common endpoints may be logged for security and abuse prevention.