Yoors security

- Yoors Security - Disclaimer: This post is intended for security researchers & testersScopeEligible domainsyoo.rsVulnerabilities that we accept:✅ Stored or reflected Cross-Site Scripting✅ CSRF/XSRF✅ SQL injection✅ S3 bucket uploads✅ Remote Code Execution✅ Authentication Bypass✅ Unauthorized data access✅ User enumerationVulnerabilities that we don't accept:❌ "Self" Cross-Site Scripting❌ Missing best practices in DNS configuration (DKIM/DMARC/SPF/TXT)❌ Denial of Service (DOS) attacks❌ Vulnerabilities in third party applications that integrate with Yoors❌ Rate limiting❌ Non-security-impacting UX issues❌ Social Engineering attacks❌ Insecure cookies❌ Only affecting outdated browsers/platforms/frameworks❌ Considered by the Yoors staff to be of low severityRulesTake responsibility and act with extreme care and caution. When investigating the matter, only use methods or techniques that are necessary in order to find or demonstrate the weaknesses.You must be the first one that reported the vulnerability Do not use weaknesses you discover for purposes other than your own investigation Do not use social engineering to gain access to a system or a Yoors account Do not install any backdoors – not even to demonstrate the vulnerability of a system Do not alter or delete any information in the system. If you need to copy information for your investigation, never copy more than you need. If one record is sufficient, do not go any further Do not alter the system in any way If you do manage to infiltrate a system, do not share access with others Do not use brute force techniques to gain access to systemsHow to reportProvide your IP address in the report. This will be kept private for tracking your testing activities and to review the logs from our sideYou can report weaknesses to us by email: security@yoo.rsDescribe the found weakness as explicit and detailed as possible and provide any evidence you might have, so that we can reproduce itWe will not accept only automated scanners output as evidenceParticularly include the following in your e-mail:Which vulnerabilityThe steps you undertookThe entire URLObjects/files that were involvedVideos and/or screenshots of an attack are highly appreciated

Tulips in Drenthe.

#photography We went a few days back to drive part of the tulip route in Drenthe and I made a few pictures but it was terribly cold so I was done soon but I want to share one picture with you, the clouds sky and the tulips it gives a beautiful contrast. A field full of tulips beautiful to look at and then a tulip that has a very different color that then jumps out. I was very sorry that it was so cold and also that taking pictures didn't work so well because I'm sitting with my shoulder. Luckily it's going in the right direction with my shoulder after a big setback a hemorrhage in the shoulder it's now moving in the right direction. I took this photo with one hand with my mobile over the tulip field and so I cut the picture. I myself think it's a beautiful picture. Next year I hope for better weather, not so icy cold and then my shoulder is completely healed and I can take pictures more easily. Last week I also went to the polder to do a car adventure with my daughter and granddaughters and also took a few pictures of the tulip fields but it was blowing too hard and I didn't really succeed yet. So I hope you like this picture. And I hope that soon I can take more pictures the way I like it. This is a nice picture I would have liked to send him in for weather photo but was too late and therefore he deserves a place here! Happy weekend people and enjoy the little things in life!