Security
Reporting a security problem
የደህንነት ችግርን ሪፖርት ማድረግ
If you have found a weakness in ejibeeji.com or our app that could put our users' accounts, money or personal information at risk, please tell us privately so we can fix it before anyone else finds it.
What to report
- Getting into someone else's account, or getting past sign-in
- Seeing or changing someone else's listings, messages, wallet or personal details
- Changing a wallet balance or a payment without paying
- Injecting script into a page other people see
- Phone numbers or other details exposed that should be private
A scam or misleading listing is not a security report: use the report button on the listing itself. For anything else, use the contact page.
How to report
Email us with "Security" in the subject. Tell us what happened, the steps to reproduce it, the page or address involved, and what an attacker could do with it. English or Amharic is fine.
support@ejibeeji.com Send an emailWhat we ask of you
- Do not open, change or keep other people's data. Test only with accounts you own.
- Do not disrupt the service: no denial-of-service, spam or floods of automated requests.
- Do not move real money, and do not trick our users or our staff.
- Keep it private until we have fixed it.
What we commit to
- We read every report and aim to reply within 5 working days.
- We fix confirmed problems as fast as we can and tell you when it is done.
- We treat a good-faith report that follows this page as help, not as an attack.
- We are a small marketplace and do not pay for reports.
Machine-readable version: /.well-known/security.txt