This is soc.uwaterloo.ca.
There is nothing here of interest save some information related to
security.txt.
PGP public key for soc at
uwaterloo.ca
Guiding principles for reporting security issues to the University of Waterloo
- We do not seek to punish those who report issues responsibly. Conversely, we do seek to prosecute irresponsible / malicious activity against our resources.
- We will endeavour to keep identities of responsible reporters hidden if desired, although we cannot absolutely guarantee that all submissions will remain completely anonymous.
- We do not offer a bug bounty program, or any other form of recognition for those reporting issues. This includes, at present, any sort of “hall of fame” page.
- We do not solicit or encourage individuals or groups to “research” our networks, but do welcome reports.
- We cannot guarantee a response beyond an acknowledgement of a submission.
- The best way to submit issues is by email to soc at uwaterloo.ca. Other submission vectors are not easily-monitored (e.g., social media) or even present (Signal, Telegram, etc).
- We are probably the best point of contact for systems or services used but not administered by the University. For example, issues with Waterloo's Learn environment could be submitted to us as well.