Security

Reporting a security issue · OverProtect LLC

If you think you've found a security issue in the Fotofied app, fotofied.com, or our license and update services, please tell us privately so we can fix it before it's made public.

How to report

Email support@fotofied.com with "Security report" in the subject. Start with a short description. If you need to send files, such as a document that triggers the problem, tell us its format and size first, and we'll arrange a private way to transfer it.

A useful report includes:

the Fotofied version (Fotofied › About Fotofied) and your macOS version;
what an attacker would need, and what they could do;
exact steps to reproduce it;
what you expected and what happened instead;
any crash report or log, with personal information removed.

What happens next

We'll confirm we received your report and keep you posted while we investigate.
Please give us a reasonable amount of time to release a fix before you publish details.
Once it's fixed, we're happy to credit you, if you'd like.

Testing in good faith

We won't pursue anyone who researches and reports in good faith and follows this page. When you test:

use only your own license, Macs and files;
don't access, change or keep other people's data;
don't disrupt our services, for example with load or denial-of-service tests;
don't use phishing or other social engineering, and don't share a working exploit before a fix is out.

Updates are signed

Fotofied installs an update only if it is signed with our update key and by our Apple developer account. Download Fotofied only from fotofied.com or through the app's Check for Updates.