Skip to content

Security: jefftko/kindle-dashboard

SECURITY.md

Security policy

Supported versions

Only the latest release receives security fixes.

Reporting a vulnerability

Please use GitHub's private vulnerability reporting for this repository. Do not include device serial numbers, Wi-Fi credentials, private endpoint contents, access tokens, or unredacted diagnostic files in a public issue.

Deployment model

Kindle Dashboard is intended for a trusted local network:

  • The Kindle only performs read-only HTTP(S) requests.
  • The response parser accepts a small allowlist of fields and rejects responses larger than 2 KiB.
  • The example server has no authentication. Do not expose it directly to the public internet.
  • config/dashboard.conf and state/ are ignored because they may contain a precise location, LAN address, business metrics, or task titles.

The project modifies /etc/upstart only when the user explicitly chooses Install / Update & Start in KUAL. Remove autostart reverses that change.

There aren't any published security advisories