diff --git a/authorization.txt b/authorization.txt deleted file mode 100644 index 865f56a..0000000 --- a/authorization.txt +++ /dev/null @@ -1,12 +0,0 @@ -I, Josef Skopec, own and operate the Jellyfin server at jelly.skopec.dev. I authorize Filip Bukovina (and his assistant) to perform authorized security testing against it. - -Scope: -- Target: jelly.skopec.dev and the Jellyfin instance running on it. -- Allowed: authenticated security testing, checking for misconfigurations, weak auth, exposed endpoints, and known Jellyfin CVEs, and reporting what you find. -- Password-strength testing: I authorize limited, rate-limited password-guessing against accounts I own, to assess password strength. This must be done at a low request rate that does not disrupt availability or lock accounts out, and must stop if lockout or service impact is likely. I accept the risk to the accounts I've named for this. -- Accounts in scope for password testing: [hackie, tata, verca]. -- Not allowed: deleting, modifying, or exfiltrating any media or user data; disrupting availability. -- Test account created for the assistant: hackie. -- This authorization is valid until [28.9.2026]. - -Signed, Josef Skopec — [date]