Jump to content

WikiCyber:Terms of Use: Difference between revisions

From WikiCyber
No edit summary
Terms of Use update (16 October 2026): minimum age, inactive accounts, malware samples, export controls, arbitration
Line 1: Line 1:
'''Effective Date:''' 1 October 2026  |  '''Last Updated:''' 1 October 2026
'''Effective Date:''' 16 October 2026  |  '''Last Updated:''' 16 October 2026


These Terms of Use (these "'''Terms'''") constitute a legally binding agreement between you and the Operator (as defined below) governing your access to and use of the WikiCyber website located at https://wikicyber.org, together with its pages, content, and related services (collectively, the "'''Site'''").
These Terms of Use (these "'''Terms'''") constitute a legally binding agreement between you and the Operator (as defined below) governing your access to and use of the WikiCyber website located at https://wikicyber.org, together with its pages, content, and related services (collectively, the "'''Site'''").


'''BY ACCESSING, BROWSING, OR CONTRIBUTING TO THE SITE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THESE TERMS AND AGREE TO BE BOUND BY THEM. IF YOU DO NOT AGREE TO THESE TERMS, YOU MUST NOT ACCESS OR USE THE SITE.''' Users who have not reached the age of majority in their jurisdiction of residence are advised to review these Terms with a parent or legal guardian before using the Site.
'''BY ACCESSING, BROWSING, OR CONTRIBUTING TO THE SITE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THESE TERMS AND AGREE TO BE BOUND BY THEM. IF YOU DO NOT AGREE TO THESE TERMS, YOU MUST NOT ACCESS OR USE THE SITE.''' '''You must be at least 13 years old to use the Site, and at least 18 years old to hold an Author account unless the conditions of Section 3.9 are met.''' Users who have not reached the age of majority in their jurisdiction of residence are advised to review these Terms with a parent or legal guardian before using the Site.


== 1. Introduction and Definitions ==
== 1. Introduction and Definitions ==
Line 49: Line 49:
== 3. Authors and Accounts ==
== 3. Authors and Accounts ==


'''3.1 Invitation only.''' Accounts on the Site are issued by invitation only. Authors are vetted before being invited and are expected to have a notable background in cybersecurity, whether as a cybersecurity professional or through a history of participation in capture-the-flag (CTF) competitions and cybersecurity camps.
'''3.1 Invitation only.''' Accounts on the Site are issued by invitation only. Authors are vetted before being invited and are expected to have a notable background in cybersecurity, whether as a cybersecurity professional or through a history of participation in capture-the-flag (CTF) competitions and cybersecurity camps. An invitation, and the holding of an account, are subject to the minimum-age requirements of Section 3.9, regardless of the background on which the Author was vetted.


'''3.2 Vetting is not a guarantee.''' The vetting of an Author does not constitute a representation or warranty by the Operator that any Author's Content is accurate, complete, current, or endorsed by the Operator. Content reflects the knowledge and opinions of the individual Authors.
'''3.2 Vetting is not a guarantee.''' The vetting of an Author does not constitute a representation or warranty by the Operator that any Author's Content is accurate, complete, current, or endorsed by the Operator. Content reflects the knowledge and opinions of the individual Authors.
Line 61: Line 61:
'''3.6 One account; accurate information.''' Unless the Operator agrees otherwise in writing, each Author may hold only one account. The Operator may deactivate any additional or duplicate account. An Author must provide accurate information to the Operator (including the email address associated with the account) and must keep that information current. Accounts are personal to the Author and may not be shared, sold, lent, or transferred.
'''3.6 One account; accurate information.''' Unless the Operator agrees otherwise in writing, each Author may hold only one account. The Operator may deactivate any additional or duplicate account. An Author must provide accurate information to the Operator (including the email address associated with the account) and must keep that information current. Accounts are personal to the Author and may not be shared, sold, lent, or transferred.


'''3.7 Authors' representations.''' By accepting an account, an Author represents and warrants that: (a) the Author has not previously been suspended or removed from the Site, and has not engaged in conduct that would justify suspension or removal; (b) the Author has the full power and authority to accept these Terms, and doing so does not breach any other agreement or obligation by which the Author is bound (including any agreement with an employer, school, or competition organizer concerning ownership of, or confidentiality of, work product); and (c) every statement the Author makes to the Operator in connection with the Author's invitation or vetting is true.
'''3.7 Authors' representations.''' By accepting an account, an Author represents and warrants that: (a) the Author has not previously been suspended or removed from the Site, and has not engaged in conduct that would justify suspension or removal; (b) the Author has the full power and authority to accept these Terms, and doing so does not breach any other agreement or obligation by which the Author is bound (including any agreement with an employer, school, or competition organizer concerning ownership of, or confidentiality of, work product); (c) every statement the Author makes to the Operator in connection with the Author's invitation or vetting is true; and (d) the Author satisfies the eligibility requirements of Section 6.5 (Export Controls and Sanctions) and will promptly notify the Operator if that ceases to be true.


'''3.8 Contributing on behalf of an organization.''' If an Author contributes to the Site in the course of employment or on behalf of a school, team, company, or other entity (an "'''Organization'''"), the Author represents that the Author is authorized to accept these Terms and to license the Contribution under the License on the Organization's behalf, and that the Organization agrees to be bound by these Terms. In that case, "you" refers to both the Author and the Organization, and the Organization is responsible to the Operator for any breach of these Terms by the Author in connection with that Contribution. An Author who is not so authorized must not submit the Contribution.
'''3.8 Contributing on behalf of an organization.''' If an Author contributes to the Site in the course of employment or on behalf of a school, team, company, or other entity (an "'''Organization'''"), the Author represents that the Author is authorized to accept these Terms and to license the Contribution under the License on the Organization's behalf, and that the Organization agrees to be bound by these Terms. In that case, "you" refers to both the Author and the Organization, and the Organization is responsible to the Operator for any breach of these Terms by the Author in connection with that Contribution. An Author who is not so authorized must not submit the Contribution.
'''3.9 Minimum age.'''
:(a) '''Use of the Site.''' You must be at least 13 years old to access or use the Site. If you are under 13, you must not use the Site, and you must not create an account, submit any Contribution, or provide any personal information to the Operator. The Site is not directed to children under 13, and the Operator does not knowingly collect personal information from children under 13.
:(b) '''Author accounts.''' You must be at least 18 years old (or the age of majority in your jurisdiction, if higher) to hold an Author account, except that a person who is at least 13 but under 18 may hold an Author account only if the Operator has received, directly from the person's parent or legal guardian and before the account is issued, written consent to the account and to these Terms, in a form the Operator accepts, together with enough information for the Operator to verify that the consent is genuine. The Operator may refuse to issue an account to any minor, and a vetting history or an invitation does not oblige the Operator to do so. A parent or legal guardian who gives consent is responsible for the minor's use of the account and may withdraw consent at any time by written notice to the Operator, upon which the Operator will deactivate the account.
:(c) '''Representation and enforcement.''' By accessing the Site or accepting an account, you represent that you meet the requirements of this Section 3.9. An Author must tell the Operator promptly if they are not, or cease to be, eligible. If the Operator learns that a person under 13 has used the Site or provided personal information, or that an account was issued in breach of this Section, the Operator may immediately deactivate the account and will take reasonable steps to delete the personal information it holds about that person, subject to any legal obligation to retain it. Contributions that have already been published may remain in accordance with the License and the public nature of the Site's edit history (Section 10.2), but the Operator may remove them.
'''3.10 Inactive accounts.'''
:(a) '''Inactivity.''' An Author account is "inactive" if, for a continuous period of twelve (12) months, the account has neither been used to log in to the Site nor been used to make an edit or other contribution, as shown by the Operator's records.
:(b) '''Deactivation.''' The Operator may deactivate an inactive account at any time. Before doing so, the Operator will make a reasonable effort to send a notice to the email address associated with the account, at least thirty (30) days in advance, but the Operator is not required to do so if the account has no working email address, and a failure of delivery does not prevent deactivation. Deactivation removes the Author's ability to log in and may include removing the Author's permissions, any reviewer or other role, and any open assignments.
:(c) '''Deletion of personal data.''' After deactivation, the Operator may delete the email address and other non-public personal information associated with the account. Because of the License, the public edit history, and the need to attribute Authors, the Author's username, and Contributions that were already published, may remain on the Site, and the Operator may rename the account to a neutral name or remove the Contributions in its discretion.
:(d) '''Reactivation.''' A former Author whose account was deactivated under this Section may ask the Operator to reactivate it. The Operator is not obliged to do so, and may require the Author to be re-vetted and to satisfy Sections 3.7, 3.9, and 6.5 again before granting the request.
:(e) '''Security.''' The Operator may also deactivate, suspend, or limit any account at any time where it reasonably suspects that the account is compromised or at risk of misuse, in accordance with Section 7.


== 4. Educational Use Only; No Professional Advice ==
== 4. Educational Use Only; No Professional Advice ==
Line 88: Line 100:
:(a) access, probe, attack, disrupt, or damage any computer system, network, account, or data '''without the explicit permission of its owner''';
:(a) access, probe, attack, disrupt, or damage any computer system, network, account, or data '''without the explicit permission of its owner''';
:(b) commit, or assist any person in committing, any crime or other unlawful act, including fraud, identity theft, stalking, unauthorized surveillance, or theft of data;
:(b) commit, or assist any person in committing, any crime or other unlawful act, including fraud, identity theft, stalking, unauthorized surveillance, or theft of data;
:(c) create, host, or distribute malware or other harmful code for malicious use.
:(c) create, host, or distribute malware or other harmful code for malicious use, or post, embed, upload, host, or link to any Malicious Code (as defined in Section 6.4) in any form other than an Educational Sample that complies with Section 6.4.


'''Prohibited conduct on the Site.''' You shall not:
'''Prohibited conduct on the Site.''' You shall not:
Line 101: Line 113:
:(l) access or attempt to access any page, feature, account, or data that you are not authorized to access (including another Author's private sandbox pages), or tamper with, probe, or bypass any security measure, permission, or protection of the Site;
:(l) access or attempt to access any page, feature, account, or data that you are not authorized to access (including another Author's private sandbox pages), or tamper with, probe, or bypass any security measure, permission, or protection of the Site;
:(m) use robots, crawlers, scrapers, or other automated means to access the Site except in a way that respects the Site's robots.txt file and any published rate limits or API guidelines, it being understood that nothing in this paragraph restricts your rights in the Content under the License;
:(m) use robots, crawlers, scrapers, or other automated means to access the Site except in a way that respects the Site's robots.txt file and any published rate limits or API guidelines, it being understood that nothing in this paragraph restricts your rights in the Content under the License;
:(n) post Content that you know to be false or misleading, that contains viruses, corrupted data, or other harmful, disruptive, or destructive files or code (other than clearly labeled educational samples that comply with Section 6(c)), or that contains political campaigning, advertising, or solicitation; or
:(n) post Content that you know to be false or misleading, that contains viruses, corrupted data, or other harmful, disruptive, or destructive files or code (other than Educational Samples that comply with Section 6.4), or that contains political campaigning, advertising, or solicitation; or
:(o) engage in, encourage, or promote any activity that violates these Terms or the rights of the Operator or any third party.
:(o) engage in, encourage, or promote any activity that violates these Terms or the rights of the Operator or any third party.


Line 116: Line 128:
=== 6.3 Responsible Disclosure ===
=== 6.3 Responsible Disclosure ===
If you discover a security vulnerability affecting the Site, you are requested to report it promptly to the contact address in Section 13 and not to exploit it, disclose it publicly before the Operator has had a reasonable opportunity to remediate it, or access data that is not your own.
If you discover a security vulnerability affecting the Site, you are requested to report it promptly to the contact address in Section 13 and not to exploit it, disclose it publicly before the Operator has had a reasonable opportunity to remediate it, or access data that is not your own.
=== 6.4 Malicious Code and Educational Samples ===
'''6.4.1 Rule and definition.''' "'''Malicious Code'''" means any software, script, macro, document, shellcode, payload, or other code that is designed to, or is reasonably capable of, damaging, disrupting, or gaining unauthorized access to a computer system, network, account, or data, including malware, ransomware, spyware, backdoors, worms, credential stealers, and working exploits. You may not post, embed, upload, host, or link to Malicious Code on the Site, except as an Educational Sample that complies with every requirement of this Section 6.4. Section 6(c) and this Section 6.4 are to be read together: nothing in this Section 6.4 permits any use that Section 6 otherwise prohibits.
'''6.4.2 Educational Sample.''' An "'''Educational Sample'''" is an excerpt or illustration of Malicious Code that satisfies all of the following:
:(a) it is included solely to explain how an attack works or to help readers detect, analyze, mitigate, or defend against it;
:(b) it is clearly labeled, immediately above the sample, with a visible notice stating that it is a defanged educational sample;
:(c) it is Defanged as required by Section 6.4.3;
:(d) it is no longer than is reasonably necessary for its educational purpose, and is accompanied by explanatory text, including how the technique can be detected or prevented; and
:(e) it does not exploit a vulnerability for which no vendor fix, patch, or mitigation has been publicly released.
'''6.4.3 Defanged.''' Code is "'''Defanged'''" only if all of the following are true:
:(a) it appears solely as human-readable text inline in the page (for example, in a code block), and not as a file, archive, attachment, download, or embedded object;
:(b) it is not compiled, packed, obfuscated, or encoded (for example, as an executable, library, installer, script bundle, or an encoded blob such as Base64 or hexadecimal data), and it does not contain raw shellcode or any other byte sequence that would run, or decode into something that would run, if copied;
:(c) it is incomplete in a way that prevents it from working as written against a real system, because it omits at least one element essential to its operation (such as a functional payload, a final stage, a working key, or target-specific values), and no reader can make it function without writing that element themselves; and
:(d) every network address, hostname, URL, credential, and other target or infrastructure value in it is an inert placeholder, such as the loopback address 127.0.0.1 (or ::1), an address in the documentation ranges 192.0.2.0/24, 198.51.100.0/24, or 203.0.113.0/24 (or 2001:db8::/32), a reserved name such as example.com, example.net, or example.org, or a name ending in .test, .example, or .invalid, and none identifies a real person, organization, system, or account.
'''6.4.4 No hosting or linking.''' The Site does not host executable, compiled, or otherwise runnable Malicious Code, and you may not upload or attempt to upload any such file. You may not post a link to any page, repository, or file from which live malware or a working exploit can be downloaded. Links to published analysis, advisories, and documentation (for example, a vendor advisory or a CVE record) that do not themselves distribute working Malicious Code are permitted. An indicator of compromise taken from real malware (for example, an address or domain) may be shown only in defanged notation (for example, "hxxp" for "http" and "[.]" for ".") and with a cited source.
'''6.4.5 Review, removal, and responsibility.''' The Operator and its reviewers determine in their sole discretion whether Content is an Educational Sample, and may reject, redact, or remove any Content that does not clearly meet this Section 6.4, without notice. Labeling Content as an educational sample does not make it one. You must not complete, restore, recompile, decode, or otherwise re-weaponize any Educational Sample, and you may run or test such material only on systems that you own or are expressly authorized in writing to test, in accordance with Section 6(a). Compliance with this Section 6.4 is a minimum requirement and does not make any use lawful. You remain solely responsible for your own conduct.
=== 6.5 Export Controls and Sanctions ===
'''6.5.1 Compliance with export laws.''' The Site and its Content include technical information about computer security, cryptography, and attack and defense techniques that may be subject to United States export control and sanctions laws, including the Export Administration Regulations (15 C.F.R. Parts 730–774) and the economic sanctions regulations administered by the U.S. Department of the Treasury's Office of Foreign Assets Control (together, "'''Export Laws'''"). You may not access, use, download, or export, re-export, or transfer the Site or any Content in violation of Export Laws or any other applicable export, import, or sanctions law. You are solely responsible for determining whether your own access to, use of, or transfer of Content is lawful where you are located and under the laws that apply to you.
'''6.5.2 Restricted persons and locations.''' You represent and warrant that you are not (a) located in, organized under the laws of, or ordinarily resident in a country or region that is the subject of a comprehensive United States embargo or sanctions program, as designated from time to time (for example, Iran, North Korea, and Syria, and any other country or region so designated); (b) identified on, or owned or controlled by a person identified on, any United States government list of prohibited, denied, or restricted parties, including the Specially Designated Nationals and Blocked Persons List, the Denied Persons List, the Entity List, and the Unverified List; or (c) otherwise prohibited by Export Laws from receiving the Content or from providing technical data or services to the Operator or to the Site.
'''6.5.3 Authors and technical contributions.''' A person described in Section 6.5.2 may not hold an Author account and may not submit, edit, or otherwise contribute technical data, technical information, source code, or other Content to the Site. The Operator may decline, suspend, or revoke any account, and may remove any Contribution, where the Operator believes, in its sole discretion, that holding the account or accepting the Contribution would or might violate Export Laws. An Author must not use a proxy, VPN, third-party account, or any other means to conceal their location or identity in order to circumvent this Section 6.5.
'''6.5.4 No representation of exportability.''' The Operator makes no representation that the Content is appropriate or available for use or export in any location, and does not provide an export classification for any Content. The Operator may restrict or block access to the Site, or to any part of it, from any location as it considers necessary to comply with law, without notice or liability.


== 7. Enforcement and Termination ==
== 7. Enforcement and Termination ==
Line 159: Line 200:
'''10.3 Service providers.''' Some of the services that operate the Site, including hosting infrastructure, are provided by Akamai Technologies, Inc. (Linode). Server logs and other data described in Section 10.1 may be stored and processed on that provider's infrastructure.
'''10.3 Service providers.''' Some of the services that operate the Site, including hosting infrastructure, are provided by Akamai Technologies, Inc. (Linode). Server logs and other data described in Section 10.1 may be stored and processed on that provider's infrastructure.


'''10.4 Supplemental Policies.''' Your use of the Site is also subject to the Supplemental Policies, which are incorporated into and form part of these Terms.
'''10.4 Children.''' The Site is not intended for, and the Operator does not knowingly collect personal information from, children under 13 (see Section 3.9). A parent or legal guardian who believes that a child under 13 has provided personal information to the Operator may contact the Operator at the address in Section 13.1, and the Operator will delete that information.
 
'''10.5 Supplemental Policies.''' Your use of the Site is also subject to the Supplemental Policies, which are incorporated into and form part of these Terms.


== 11. Disclaimer of Warranties; Limitation of Liability ==
== 11. Disclaimer of Warranties; Limitation of Liability ==
Line 197: Line 240:
'''15.1 Governing law.''' These Terms, and any dispute arising out of or relating to them or to the Site, are governed by the laws of the State of California, United States of America, without regard to its conflict-of-laws principles.
'''15.1 Governing law.''' These Terms, and any dispute arising out of or relating to them or to the Site, are governed by the laws of the State of California, United States of America, without regard to its conflict-of-laws principles.


'''15.2 Jurisdiction and venue.''' Subject to Section 15.3, you irrevocably consent to the exclusive jurisdiction and venue of the state and federal courts located in the State of California for any such dispute, and waive any objection based on inconvenient forum.
'''15.2 Jurisdiction and venue.''' Subject to Sections 15.3 and 15.12 through 15.15, you irrevocably consent to the exclusive jurisdiction and venue of the state and federal courts located in the State of California for any such dispute, and waive any objection based on inconvenient forum.


'''15.3 Equitable relief.''' Notwithstanding Section 15.2, the Operator may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent or restrain any actual or threatened violation of these Terms or misuse of the Site.
'''15.3 Equitable relief.''' Notwithstanding Sections 15.2 and 15.12, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent or restrain any actual or threatened violation of these Terms, infringement or misappropriation of intellectual property rights, or misuse of the Site.


'''15.4 Severability.''' If any provision of these Terms is held to be invalid, illegal, or unenforceable, that provision shall be enforced to the maximum extent permissible and the remaining provisions shall continue in full force and effect.
'''15.4 Severability.''' If any provision of these Terms is held to be invalid, illegal, or unenforceable, that provision shall be enforced to the maximum extent permissible and the remaining provisions shall continue in full force and effect.
Line 215: Line 258:
'''15.10 Digital identity and age-verification laws.''' The Site is operated from the United States, does not require or collect government-issued identification or biometric data, and does not perform age or identity verification. If you are located in, or are a resident or citizen of, a country or region whose laws require a website or online service to implement digital identity, government-ID, or age-verification measures in order to serve its users (for example, the United Kingdom or Australia), you agree that you will not access or use the Site or its services while those requirements apply. You are responsible for determining whether the laws of your location impose such requirements. The Operator does not implement such measures and does not accept that those laws apply to the Operator or the Site. The Operator may block or restrict access from any country or region at any time and without notice.
'''15.10 Digital identity and age-verification laws.''' The Site is operated from the United States, does not require or collect government-issued identification or biometric data, and does not perform age or identity verification. If you are located in, or are a resident or citizen of, a country or region whose laws require a website or online service to implement digital identity, government-ID, or age-verification measures in order to serve its users (for example, the United Kingdom or Australia), you agree that you will not access or use the Site or its services while those requirements apply. You are responsible for determining whether the laws of your location impose such requirements. The Operator does not implement such measures and does not accept that those laws apply to the Operator or the Site. The Operator may block or restrict access from any country or region at any time and without notice.


'''15.11 Survival.''' Sections that by their nature should survive the termination of your access to the Site shall so survive, including Sections 2, 3.7, 3.8, 4, 5, 6, 7, 8, 9, 11, 12, 13, and 15.
'''15.11 Survival.''' Sections that by their nature should survive the termination of your access to the Site shall so survive, including Sections 2, 3.7, 3.8, 3.9(c), 4, 5, 6, 7, 8, 9, 11, 12, 13, and 15.
 
'''15.12 Informal resolution and binding arbitration.'''
:(a) '''Informal resolution first.''' Before starting an arbitration, a party must send the other a written notice describing the dispute and the relief sought (to the Operator, at the address in Section 13.1; to you, at the email address associated with your account), and the parties will try in good faith to resolve it informally for at least thirty (30) days after the notice is received.
:(b) '''Agreement to arbitrate.''' If a dispute is not resolved within that period, then, except as provided in Section 15.12(e) and Section 15.15, you and the Operator agree that any dispute, claim, or controversy arising out of or relating to these Terms, the Site, or the Content, whether based in contract, tort, statute, or otherwise, will be resolved exclusively by final and binding arbitration on an individual basis, and not in court before a judge or jury. This Section 15.12 is governed by the Federal Arbitration Act (9 U.S.C. § 1 et seq.).
:(c) '''Rules and administrator.''' The arbitration will be administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules in effect when the arbitration is started, as modified by this Section. The rules and filing instructions are available at https://www.adr.org. The arbitration will be conducted by a single arbitrator, in writing or by video or telephone conference, unless the arbitrator decides that an in-person hearing is necessary, in which case it will be held in the county where you live or another place that the parties agree on.
:(d) '''Costs.''' Fees and costs will be allocated under the AAA Consumer Arbitration Rules. If those rules would require you to pay more than you would have paid to file a lawsuit in the state court of the county where you live, the Operator will pay the excess. Each party bears its own attorneys' fees, except where applicable law or the arbitrator's authority under this Section permits an award of fees.
:(e) '''Exceptions.''' Either party may (i) bring an individual claim in small claims court if the claim qualifies; (ii) seek injunctive or other equitable relief under Section 15.3; and (iii) bring a claim for public injunctive relief only in court, as provided in Section 15.14.
:(f) '''Authority of the arbitrator.''' The arbitrator may award any individual relief that a court could award on the claims properly before the arbitrator, but may not award relief for or against anyone who is not a party. The arbitrator's decision is final, and a court having jurisdiction may enter judgment on it. The arbitrator, and not a court, decides whether a dispute falls within this Section 15.12, except that a court decides whether Section 15.13 (class action waiver) is enforceable.
 
'''15.13 Class action and jury waiver.''' To the fullest extent permitted by applicable law, you and the Operator each waive the right to participate in, or to receive money or other relief from, any class, collective, consolidated, representative, or private-attorney-general action or proceeding against the other, and agree that any dispute will be resolved on an individual basis only. The arbitrator may not consolidate the claims of more than one person or preside over any form of class or representative proceeding. If a court finds this Section 15.13 unenforceable as to a claim, then that claim (and only that claim) must be brought in court under Section 15.2 and not in arbitration, and the remaining claims will be arbitrated. To the fullest extent permitted by law, each party also waives any right to a jury trial in any dispute that proceeds in court.
 
'''15.14 Public injunctive relief.''' Nothing in this Section 15 waives any right to seek public injunctive relief that cannot lawfully be waived. If such a claim is pursued, it must be brought in court under Section 15.2, and any other claims will be arbitrated; the court action will be stayed until the arbitration has concluded, to the extent permitted by law.
 
'''15.15 Opt-out; changes; severability of Section 15.12.'''
:(a) '''Opt-out.''' You may opt out of Sections 15.12 and 15.13 by sending the Operator a written notice, from the email address associated with your account, to the address in Section 13.1, within thirty (30) days after you first accept these Terms (or, for an existing Author, within thirty (30) days after the date these provisions are first published on the Site). The notice must state your username and that you opt out of arbitration. If you opt out, Section 15.2 applies instead of Sections 15.12 and 15.13, and the other provisions of these Terms are unaffected.
:(b) '''Changes.''' If the Operator changes this Section 15 in the future, the change does not apply to any dispute for which notice under Section 15.12(a) was given before the change took effect.
:(c) '''Minors.''' To the extent that a person is a minor under applicable law, Sections 15.12 and 15.13 apply only to the extent permitted by that law.
:(d) '''Severability.''' If any part of Section 15.12 other than Section 15.13 is held unenforceable, that part will be severed and the rest will remain in effect.

Revision as of 21:34, 16 October 2026

Effective Date: 16 October 2026  |  Last Updated: 16 October 2026

These Terms of Use (these "Terms") constitute a legally binding agreement between you and the Operator (as defined below) governing your access to and use of the WikiCyber website located at https://wikicyber.org, together with its pages, content, and related services (collectively, the "Site").

BY ACCESSING, BROWSING, OR CONTRIBUTING TO THE SITE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THESE TERMS AND AGREE TO BE BOUND BY THEM. IF YOU DO NOT AGREE TO THESE TERMS, YOU MUST NOT ACCESS OR USE THE SITE. You must be at least 13 years old to use the Site, and at least 18 years old to hold an Author account unless the conditions of Section 3.9 are met. Users who have not reached the age of majority in their jurisdiction of residence are advised to review these Terms with a parent or legal guardian before using the Site.

1. Introduction and Definitions

1.1 The Operator. WikiCyber is a free educational project operated by Shore-Roger Enterprises (the "Operator", "we", "us", or "our"). The Site is an encyclopedia-style reference of cybersecurity guides, tutorials, and articles written by contributors and is made available free of charge. The Operator operates the Site as a free educational project and without any intention of making a profit, now or in the future.

1.2 Definitions. In these Terms, unless the context requires otherwise:

"Author" means a natural person to whom the Operator has issued an account on the Site and who creates, edits, or submits Content.
"Content" means all text, code, images, data, and other material made available on the Site, including Contributions.
"Contribution" means any Content that an Author creates, edits, or submits to the Site, whether or not it has been published, including articles, drafts, sandbox pages, talk-page comments, and edit summaries.
"License" means the Creative Commons Attribution-ShareAlike 4.0 International Public License (CC BY-SA 4.0).
"Supplemental Policies" means the Privacy policy and the General disclaimer, each as published on the Site from time to time.
"User" or "you" means any person or entity that accesses or uses the Site, including any Author.
"WikiCyber Parties" means the Operator and its owners, officers, administrators, agents, volunteers, and Authors.

1.3 Interpretation. Headings are for convenience only and do not affect the interpretation of these Terms. The word "including" means "including without limitation." References to a statute or regulation are to that statute or regulation as amended or replaced from time to time.

1.4 Availability of the Site. The Operator may modify, suspend, restrict, or discontinue the Site, or any part of it, at any time, for any reason, and without notice or liability.

2. Content License and Contributions

2.1 License to Content

2.1.1 Unless a page or item expressly states otherwise, Content is made available to the public, free of charge, under the License. Subject to and in accordance with the License, you may copy, redistribute, and adapt the Content for any purpose, including commercial use, provided that you comply with the License, including the following conditions:

(a) Attribution. You must give appropriate credit to WikiCyber and its Authors, provide a link to the License, and indicate whether changes were made. A hyperlink or URL to the page you used, or to its history page, is sufficient to credit the Authors.
(b) ShareAlike. If you remix, transform, or build upon the Content, you must distribute your contributions under the License or a license that the License designates as compatible.

2.1.2 Section 2.1.1 is a summary provided for convenience and is not a substitute for the License. In the event of any conflict between this Section 2.1 and the License, the License governs with respect to the rights granted in the Content.

2.2 Contributions

By creating, editing, or submitting a Contribution, an Author represents, warrants, and agrees that:

(a) the Author hereby licenses the Contribution to the public under the License, and acknowledges that such license is irrevocable;
(b) the Contribution is the Author's original work, or the Author otherwise holds all rights necessary to license it under the License, and the Contribution does not infringe, misappropriate, or violate the copyright, trademark, privacy, or other rights of any third party;
(c) any third-party material included in the Contribution is identified as such and is available under a license compatible with the License;
(d) Contributions that are published on the Site, together with their edit histories and the Author's username, are publicly and permanently visible, and may be edited, reorganized, moved, or removed by the Operator's administrators at any time;
(e) subject to the License, the Author retains such copyright as the Author holds in the Contribution, and no Contribution creates any obligation on the part of the Operator to publish, retain, or credit it other than as the License requires; and
(f) the Contribution complies with Section 6.

2.3 Matters Not Licensed

(a) Third-party material that is marked with its own license, copyright notice, or terms remains subject to that license, notice, or terms.
(b) The names "WikiCyber" and "Shore-Roger Enterprises," and all associated logos, are trademarks or trade names of their respective owners. The License does not grant any trademark rights, and no such rights are granted by these Terms.

2.4 Linking to the Site

You may link to any page of the Site, including by text hyperlink, for any lawful purpose, provided that the linking does not suggest that the Operator or any Author sponsors, endorses, or is affiliated with you or your site, and that your site does not contain material that is unlawful, harassing, hateful, or otherwise objectionable. You may not use the WikiCyber name or any WikiCyber logo or graphic as a link or in any other manner that suggests endorsement without the Operator's prior written permission. This Section does not limit the attribution you are required to give under the License. The Operator may withdraw this permission as to any particular site at any time.

3. Authors and Accounts

3.1 Invitation only. Accounts on the Site are issued by invitation only. Authors are vetted before being invited and are expected to have a notable background in cybersecurity, whether as a cybersecurity professional or through a history of participation in capture-the-flag (CTF) competitions and cybersecurity camps. An invitation, and the holding of an account, are subject to the minimum-age requirements of Section 3.9, regardless of the background on which the Author was vetted.

3.2 Vetting is not a guarantee. The vetting of an Author does not constitute a representation or warranty by the Operator that any Author's Content is accurate, complete, current, or endorsed by the Operator. Content reflects the knowledge and opinions of the individual Authors.

3.3 Account security. Each Author is solely responsible for maintaining the confidentiality of their account credentials, for all activity that occurs under their account, and for not permitting any other person to use their account. An Author is the sole authorized user of their account. An Author must notify the Operator promptly upon becoming aware of, or reasonably suspecting, any unauthorized use of their account or compromise of their credentials.

3.4 Editorial control and review. New or changed Content may be held in a draft or review queue before publication. The Operator may edit, move, decline to publish, or remove any Content at any time and for any reason, in its sole discretion.

3.5 No employment or agency. Unless the Operator and an Author have agreed otherwise in a signed writing, Authors contribute voluntarily and without compensation, and nothing in these Terms creates an employment, partnership, joint venture, or agency relationship between the Operator and any Author.

3.6 One account; accurate information. Unless the Operator agrees otherwise in writing, each Author may hold only one account. The Operator may deactivate any additional or duplicate account. An Author must provide accurate information to the Operator (including the email address associated with the account) and must keep that information current. Accounts are personal to the Author and may not be shared, sold, lent, or transferred.

3.7 Authors' representations. By accepting an account, an Author represents and warrants that: (a) the Author has not previously been suspended or removed from the Site, and has not engaged in conduct that would justify suspension or removal; (b) the Author has the full power and authority to accept these Terms, and doing so does not breach any other agreement or obligation by which the Author is bound (including any agreement with an employer, school, or competition organizer concerning ownership of, or confidentiality of, work product); (c) every statement the Author makes to the Operator in connection with the Author's invitation or vetting is true; and (d) the Author satisfies the eligibility requirements of Section 6.5 (Export Controls and Sanctions) and will promptly notify the Operator if that ceases to be true.

3.8 Contributing on behalf of an organization. If an Author contributes to the Site in the course of employment or on behalf of a school, team, company, or other entity (an "Organization"), the Author represents that the Author is authorized to accept these Terms and to license the Contribution under the License on the Organization's behalf, and that the Organization agrees to be bound by these Terms. In that case, "you" refers to both the Author and the Organization, and the Organization is responsible to the Operator for any breach of these Terms by the Author in connection with that Contribution. An Author who is not so authorized must not submit the Contribution.

3.9 Minimum age.

(a) Use of the Site. You must be at least 13 years old to access or use the Site. If you are under 13, you must not use the Site, and you must not create an account, submit any Contribution, or provide any personal information to the Operator. The Site is not directed to children under 13, and the Operator does not knowingly collect personal information from children under 13.
(b) Author accounts. You must be at least 18 years old (or the age of majority in your jurisdiction, if higher) to hold an Author account, except that a person who is at least 13 but under 18 may hold an Author account only if the Operator has received, directly from the person's parent or legal guardian and before the account is issued, written consent to the account and to these Terms, in a form the Operator accepts, together with enough information for the Operator to verify that the consent is genuine. The Operator may refuse to issue an account to any minor, and a vetting history or an invitation does not oblige the Operator to do so. A parent or legal guardian who gives consent is responsible for the minor's use of the account and may withdraw consent at any time by written notice to the Operator, upon which the Operator will deactivate the account.
(c) Representation and enforcement. By accessing the Site or accepting an account, you represent that you meet the requirements of this Section 3.9. An Author must tell the Operator promptly if they are not, or cease to be, eligible. If the Operator learns that a person under 13 has used the Site or provided personal information, or that an account was issued in breach of this Section, the Operator may immediately deactivate the account and will take reasonable steps to delete the personal information it holds about that person, subject to any legal obligation to retain it. Contributions that have already been published may remain in accordance with the License and the public nature of the Site's edit history (Section 10.2), but the Operator may remove them.

3.10 Inactive accounts.

(a) Inactivity. An Author account is "inactive" if, for a continuous period of twelve (12) months, the account has neither been used to log in to the Site nor been used to make an edit or other contribution, as shown by the Operator's records.
(b) Deactivation. The Operator may deactivate an inactive account at any time. Before doing so, the Operator will make a reasonable effort to send a notice to the email address associated with the account, at least thirty (30) days in advance, but the Operator is not required to do so if the account has no working email address, and a failure of delivery does not prevent deactivation. Deactivation removes the Author's ability to log in and may include removing the Author's permissions, any reviewer or other role, and any open assignments.
(c) Deletion of personal data. After deactivation, the Operator may delete the email address and other non-public personal information associated with the account. Because of the License, the public edit history, and the need to attribute Authors, the Author's username, and Contributions that were already published, may remain on the Site, and the Operator may rename the account to a neutral name or remove the Contributions in its discretion.
(d) Reactivation. A former Author whose account was deactivated under this Section may ask the Operator to reactivate it. The Operator is not obliged to do so, and may require the Author to be re-vetted and to satisfy Sections 3.7, 3.9, and 6.5 again before granting the request.
(e) Security. The Operator may also deactivate, suspend, or limit any account at any time where it reasonably suspects that the account is compromised or at risk of misuse, in accordance with Section 7.

4. Educational Use Only; No Professional Advice

4.1 Educational purpose. WikiCyber is not a source of expert help. The Site is a reference work, similar in style to an encyclopedia, intended solely for general educational purposes. Nothing on the Site constitutes professional, legal, security-consulting, or other individualized advice, and no attorney-client, consultant-client, or other professional relationship is created by your use of the Site.

4.2 No assurance of accuracy. Cybersecurity guidance is dependent on context, and the techniques described on the Site may alter, disable, or damage systems and data. Content may be incomplete, out of date, or incorrect. Before applying any Content, you should practice in an isolated laboratory or virtual machine, maintain backups, and verify the information against authoritative sources.

4.3 Assumption of risk and responsibility. You use the Site and the Content entirely at your own risk. You are solely responsible for (a) obtaining all authorizations necessary before testing, configuring, or otherwise acting upon any system, network, or data, and (b) ensuring that your use of the Content complies with all applicable laws, regulations, and agreements.

5. No Affiliation; Third-Party Marks

5.1 Wikipedia and the Wikimedia Foundation. WikiCyber is not affiliated with, endorsed by, sponsored by, or representative of Wikipedia or the Wikimedia Foundation, and does not claim otherwise. The Site runs on MediaWiki, free and open-source software that is used by many unrelated organizations, and the use of that software implies no affiliation of any kind.

5.2 Other organizations. WikiCyber is not affiliated with, endorsed by, or sponsored by CyberPatriot, the Air & Space Forces Association, Cisco Systems, Microsoft Corporation, or any other organization, product, service, or competition that may be mentioned on the Site.

5.3 Third-party marks. All third-party names, trademarks, and logos are the property of their respective owners and are used for identification and educational reference only.

6. Acceptable Use

Cybersecurity knowledge may be used either to defend systems or to attack them. You are fully responsible for your own conduct on and in connection with the Site. You may use the Site only for lawful and ethical purposes, in compliance with all applicable laws and regulations, with this Section 6, and with any editorial policies, help pages, or reasonable instructions the Operator publishes on the Site from time to time. If you use any third-party service in connection with the Site, you must also comply with that service's terms.

Prohibited uses of the Site and its Content. You shall not use the Site, or any information obtained from it, to:

(a) access, probe, attack, disrupt, or damage any computer system, network, account, or data without the explicit permission of its owner;
(b) commit, or assist any person in committing, any crime or other unlawful act, including fraud, identity theft, stalking, unauthorized surveillance, or theft of data;
(c) create, host, or distribute malware or other harmful code for malicious use, or post, embed, upload, host, or link to any Malicious Code (as defined in Section 6.4) in any form other than an Educational Sample that complies with Section 6.4.

Prohibited conduct on the Site. You shall not:

(d) attack, overload, abusively scrape, or attempt to circumvent the security or access controls of the Site;
(e) post the private information, credentials, or confidential material of any other person without that person's consent;
(f) post Content that infringes any person's intellectual property rights, or that is harassing, threatening, intimidating, stalking, obscene, hateful, deceptive, or spam;
(g) impersonate any person or misrepresent your qualifications or affiliation;
(h) post answers, keys, or non-public materials from an ongoing competition where the rules of that competition prohibit sharing them;
(i) discriminate against, or harass, any person on the basis of race, color, national origin, religion, sex, gender identity, sexual orientation, disability, medical condition, marital status, age, or any other characteristic protected by applicable law;
(j) use or attempt to use another person's account, or allow another person to use yours;
(k) interfere with, disrupt, damage, disable, or overburden the Site or its servers or networks, or impair any other person's use of the Site, including by abusing the review, request, or notification features;
(l) access or attempt to access any page, feature, account, or data that you are not authorized to access (including another Author's private sandbox pages), or tamper with, probe, or bypass any security measure, permission, or protection of the Site;
(m) use robots, crawlers, scrapers, or other automated means to access the Site except in a way that respects the Site's robots.txt file and any published rate limits or API guidelines, it being understood that nothing in this paragraph restricts your rights in the Content under the License;
(n) post Content that you know to be false or misleading, that contains viruses, corrupted data, or other harmful, disruptive, or destructive files or code (other than Educational Samples that comply with Section 6.4), or that contains political campaigning, advertising, or solicitation; or
(o) engage in, encourage, or promote any activity that violates these Terms or the rights of the Operator or any third party.

6.1.1 Promotional links are prohibited on articles, drafts, and all other pages of the Site, except as provided in Section 6.1.2. A "promotional link" includes any link to your own or any other person's website, blog, video channel, store, newsletter, or social media profile; any donation, sponsorship, or "buy me a coffee" page; and any affiliate, referral, or advertising link.

6.1.2 Promotional links are permitted only on an Author's own user profile page (the page titled "User:" followed by the Author's username). Promotional links are not permitted on articles, on drafts or sandbox pages submitted for review, on talk pages, or on any other page. An Author must remove all promotional links from a draft before submitting it for review.

6.1.3 A link that serves as a genuine source for a statement of fact, cited in accordance with the Site's sourcing policy (for example, a link to official documentation), is not a promotional link. However, the Operator's reviewers may remove any link whose primary purpose is promotional, and the Operator may remove promotional links and content at any time without notice. Repeated violations of this Section 6.1 may result in the loss of Author access under Section 7.

6.2 Reasonable File Sizes

Whenever the Site permits the upload or embedding of images or other files, an Author must keep each file reasonably sized for its purpose. For example, an image that shows only a small diagram or arrow must not be uploaded as a multi-megapixel or 4K image. An Author must resize, crop, or compress files before uploading them, and must not upload files that are larger than needed to serve their educational purpose. The Operator may set maximum file sizes and dimensions, and may resize, replace, or remove any file that is unreasonably large, without notice.

6.3 Responsible Disclosure

If you discover a security vulnerability affecting the Site, you are requested to report it promptly to the contact address in Section 13 and not to exploit it, disclose it publicly before the Operator has had a reasonable opportunity to remediate it, or access data that is not your own.

6.4 Malicious Code and Educational Samples

6.4.1 Rule and definition. "Malicious Code" means any software, script, macro, document, shellcode, payload, or other code that is designed to, or is reasonably capable of, damaging, disrupting, or gaining unauthorized access to a computer system, network, account, or data, including malware, ransomware, spyware, backdoors, worms, credential stealers, and working exploits. You may not post, embed, upload, host, or link to Malicious Code on the Site, except as an Educational Sample that complies with every requirement of this Section 6.4. Section 6(c) and this Section 6.4 are to be read together: nothing in this Section 6.4 permits any use that Section 6 otherwise prohibits.

6.4.2 Educational Sample. An "Educational Sample" is an excerpt or illustration of Malicious Code that satisfies all of the following:

(a) it is included solely to explain how an attack works or to help readers detect, analyze, mitigate, or defend against it;
(b) it is clearly labeled, immediately above the sample, with a visible notice stating that it is a defanged educational sample;
(c) it is Defanged as required by Section 6.4.3;
(d) it is no longer than is reasonably necessary for its educational purpose, and is accompanied by explanatory text, including how the technique can be detected or prevented; and
(e) it does not exploit a vulnerability for which no vendor fix, patch, or mitigation has been publicly released.

6.4.3 Defanged. Code is "Defanged" only if all of the following are true:

(a) it appears solely as human-readable text inline in the page (for example, in a code block), and not as a file, archive, attachment, download, or embedded object;
(b) it is not compiled, packed, obfuscated, or encoded (for example, as an executable, library, installer, script bundle, or an encoded blob such as Base64 or hexadecimal data), and it does not contain raw shellcode or any other byte sequence that would run, or decode into something that would run, if copied;
(c) it is incomplete in a way that prevents it from working as written against a real system, because it omits at least one element essential to its operation (such as a functional payload, a final stage, a working key, or target-specific values), and no reader can make it function without writing that element themselves; and
(d) every network address, hostname, URL, credential, and other target or infrastructure value in it is an inert placeholder, such as the loopback address 127.0.0.1 (or ::1), an address in the documentation ranges 192.0.2.0/24, 198.51.100.0/24, or 203.0.113.0/24 (or 2001:db8::/32), a reserved name such as example.com, example.net, or example.org, or a name ending in .test, .example, or .invalid, and none identifies a real person, organization, system, or account.

6.4.4 No hosting or linking. The Site does not host executable, compiled, or otherwise runnable Malicious Code, and you may not upload or attempt to upload any such file. You may not post a link to any page, repository, or file from which live malware or a working exploit can be downloaded. Links to published analysis, advisories, and documentation (for example, a vendor advisory or a CVE record) that do not themselves distribute working Malicious Code are permitted. An indicator of compromise taken from real malware (for example, an address or domain) may be shown only in defanged notation (for example, "hxxp" for "http" and "[.]" for ".") and with a cited source.

6.4.5 Review, removal, and responsibility. The Operator and its reviewers determine in their sole discretion whether Content is an Educational Sample, and may reject, redact, or remove any Content that does not clearly meet this Section 6.4, without notice. Labeling Content as an educational sample does not make it one. You must not complete, restore, recompile, decode, or otherwise re-weaponize any Educational Sample, and you may run or test such material only on systems that you own or are expressly authorized in writing to test, in accordance with Section 6(a). Compliance with this Section 6.4 is a minimum requirement and does not make any use lawful. You remain solely responsible for your own conduct.

6.5 Export Controls and Sanctions

6.5.1 Compliance with export laws. The Site and its Content include technical information about computer security, cryptography, and attack and defense techniques that may be subject to United States export control and sanctions laws, including the Export Administration Regulations (15 C.F.R. Parts 730–774) and the economic sanctions regulations administered by the U.S. Department of the Treasury's Office of Foreign Assets Control (together, "Export Laws"). You may not access, use, download, or export, re-export, or transfer the Site or any Content in violation of Export Laws or any other applicable export, import, or sanctions law. You are solely responsible for determining whether your own access to, use of, or transfer of Content is lawful where you are located and under the laws that apply to you.

6.5.2 Restricted persons and locations. You represent and warrant that you are not (a) located in, organized under the laws of, or ordinarily resident in a country or region that is the subject of a comprehensive United States embargo or sanctions program, as designated from time to time (for example, Iran, North Korea, and Syria, and any other country or region so designated); (b) identified on, or owned or controlled by a person identified on, any United States government list of prohibited, denied, or restricted parties, including the Specially Designated Nationals and Blocked Persons List, the Denied Persons List, the Entity List, and the Unverified List; or (c) otherwise prohibited by Export Laws from receiving the Content or from providing technical data or services to the Operator or to the Site.

6.5.3 Authors and technical contributions. A person described in Section 6.5.2 may not hold an Author account and may not submit, edit, or otherwise contribute technical data, technical information, source code, or other Content to the Site. The Operator may decline, suspend, or revoke any account, and may remove any Contribution, where the Operator believes, in its sole discretion, that holding the account or accepting the Contribution would or might violate Export Laws. An Author must not use a proxy, VPN, third-party account, or any other means to conceal their location or identity in order to circumvent this Section 6.5.

6.5.4 No representation of exportability. The Operator makes no representation that the Content is appropriate or available for use or export in any location, and does not provide an export classification for any Content. The Operator may restrict or block access to the Site, or to any part of it, from any location as it considers necessary to comply with law, without notice or liability.

7. Enforcement and Termination

7.1 Remedies. If the Operator believes, in its sole discretion, that you have violated or are likely to violate these Terms, the Operator may, at any time and without prior notice: (a) remove, edit, or restrict access to any Content; (b) suspend (temporarily or indefinitely) or permanently revoke your account or your access to the Site; (c) cooperate with law enforcement and other governmental authorities; and (d) take any other action permitted by law or in equity.

7.2 Unlawful use. Use of the Site to gain unauthorized access to any system, to commit any crime, or for any other unlawful purpose is prohibited and may result in legal action.

7.3 Legal process. The Operator may disclose information about you or your use of the Site where it believes in good faith that disclosure is required by law, legal process, or governmental request, or is necessary to protect the rights, property, or safety of the Operator, the Site, or others.

7.4 Termination by you; effect of termination. You may stop using the Site at any time. Upon suspension or termination of your access for any reason, your right to use the Site ceases immediately. Termination does not revoke, and does not entitle you to the removal of, any license granted or Contribution made under Section 2.

7.5 No liability. The WikiCyber Parties shall have no liability to you for any action taken in good faith under this Section 7.

8.1 Notice of claimed infringement. The Operator respects intellectual property rights and responds to notices of alleged copyright infringement in accordance with applicable law, including Title 17, United States Code, Section 512. If you believe that Content on the Site infringes a copyright that you own or control, you may submit a written notice to the contact address in Section 13 that includes:

(a) your physical or electronic signature, or that of a person authorized to act on behalf of the copyright owner;
(b) identification of the copyrighted work claimed to have been infringed;
(c) identification of the material claimed to be infringing, with the URL of the page on which it appears, in sufficient detail to permit the Operator to locate it;
(d) your name, mailing address, telephone number, and email address;
(e) a statement that you have a good-faith belief that the use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law; and
(f) a statement that the information in the notice is accurate and, under penalty of perjury, that you are authorized to act on behalf of the owner of the exclusive right allegedly infringed.

8.2 Action upon notice. Upon receipt of a notice that substantially complies with Section 8.1, the Operator may remove or disable access to the identified material and may notify the Author who submitted it.

8.3 Counter-notification. An Author whose Content has been removed pursuant to Section 8.2 may submit a written counter-notice to the contact address in Section 13 that includes: (a) the Author's physical or electronic signature; (b) identification of the material removed and the location at which it appeared before removal; (c) a statement, under penalty of perjury, that the Author has a good-faith belief that the material was removed as a result of mistake or misidentification; and (d) the Author's name, address, and telephone number, and a statement that the Author consents to the jurisdiction of the federal district court for the judicial district in which the Author's address is located (or, if the address is outside the United States, any judicial district in which the Operator may be found) and will accept service of process from the person who submitted the original notice. Upon receipt of a compliant counter-notice, the Operator may forward it to the complaining party and may restore the material, in accordance with applicable law, unless the complaining party notifies the Operator that it has filed an action seeking a court order against the Author.

8.4 Repeat infringers. In appropriate circumstances, the Operator will suspend or terminate the accounts of Authors who are repeat infringers of copyright.

8.5 Misrepresentation. You may be held liable for damages, including costs and attorneys' fees, if you knowingly and materially misrepresent that material is infringing or was removed by mistake or misidentification.

The Site may contain links to, or reproduce content from, websites, services, and materials that are owned or operated by third parties. Such materials include links to external web pages, tools, repositories, videos, downloads (including practice images and files), and any other service mentioned on the Site (collectively, "Third-Party Materials"). The Operator does not control, create, update, monitor, endorse, or adopt any Third-Party Materials, makes no guarantee that they are accurate, complete, current, safe, or lawful, and assumes no responsibility for their content, availability, security, or privacy practices. Downloaded files in particular may contain malware or be unsuitable for your systems; you should open them only in an isolated environment. Your correspondence or dealings with, or participation in promotions of, any third party found on or through the Site are solely between you and that third party. You decide whether to access or use Third-Party Materials, you do so at your own risk, and your use is governed by the terms and policies of that third party.

10. Privacy

10.1 Information collected. The Operator collects and uses limited information, such as usernames, email addresses associated with accounts, and server logs, for the purposes of operating, maintaining, and securing the Site.

10.2 Public nature of Contributions. All Contributions that are published on the Site, including the Author's username and edit history, are public and are not confidential.

10.3 Service providers. Some of the services that operate the Site, including hosting infrastructure, are provided by Akamai Technologies, Inc. (Linode). Server logs and other data described in Section 10.1 may be stored and processed on that provider's infrastructure.

10.4 Children. The Site is not intended for, and the Operator does not knowingly collect personal information from, children under 13 (see Section 3.9). A parent or legal guardian who believes that a child under 13 has provided personal information to the Operator may contact the Operator at the address in Section 13.1, and the Operator will delete that information.

10.5 Supplemental Policies. Your use of the Site is also subject to the Supplemental Policies, which are incorporated into and form part of these Terms.

11. Disclaimer of Warranties; Limitation of Liability

11.1 Disclaimer of warranties. THE SITE AND ALL CONTENT ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY WARRANTIES OF ACCURACY, COMPLETENESS, TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE OPERATOR DOES NOT WARRANT THAT THE SITE OR THE CONTENT WILL BE UNINTERRUPTED, TIMELY, ERROR-FREE, SECURE, OR FREE OF HARMFUL COMPONENTS.

11.2 Exclusion of damages. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ANY OF THE WIKICYBER PARTIES BE LIABLE TO YOU OR TO ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF DATA, PROFITS, REVENUE, GOODWILL, OR SYSTEM AVAILABILITY, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS, THE SITE, OR THE CONTENT, OR YOUR USE OF, OR INABILITY TO USE, THE SITE OR THE CONTENT, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE, OR ANY OTHER LEGAL THEORY, AND EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

11.3 Limitation of aggregate liability. BECAUSE THE SITE IS PROVIDED FREE OF CHARGE, TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE TOTAL AGGREGATE LIABILITY OF THE WIKICYBER PARTIES FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS, THE SITE, OR THE CONTENT SHALL NOT EXCEED ZERO U.S. DOLLARS (US$0.00).

11.4 Exceptions. Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under applicable law. Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages, and in those jurisdictions the exclusions and limitations in this Section 11 apply only to the fullest extent permitted.

11.5 Basis of the bargain. You acknowledge that the disclaimers and limitations in this Section 11 reflect a reasonable allocation of risk, that the Site is provided free of charge in reliance on them, and that they apply even if any limited remedy fails of its essential purpose.

12. Indemnification

12.1 Indemnity. To the fullest extent permitted by applicable law, you agree to defend, indemnify, and hold harmless the WikiCyber Parties from and against any and all claims, demands, actions, liabilities, damages, losses, and expenses (including reasonable attorneys' fees and costs) arising out of or relating to: (a) your breach of these Terms; (b) your violation of any law or of any right of a third party; or (c) your unauthorized or unlawful use of the Site or the Content.

12.2 Procedure. The Operator will use reasonable efforts to notify you of any claim for which it seeks indemnification, provided that failure to do so does not relieve you of your obligations except to the extent you are materially prejudiced. The Operator may, at its option, assume the exclusive defense and control of any such claim, at your expense, and you shall cooperate with that defense and shall not settle any such claim without the Operator's prior written consent.

13. Contact and Notices

13.1 Contact. Questions regarding these Terms, notices of claimed copyright infringement and counter-notices under Section 8, and reports under Section 6.3 should be directed to: admin@wikicyber.org.

13.2 Notices to you. The Operator may provide notices to you by posting them on the Site or by sending them to the email address associated with your account, if any. Notices so given are deemed received when posted or sent.

13.3 Electronic communications. You consent to receive communications from the Operator in electronic form and agree that electronic communications satisfy any legal requirement that such communications be in writing.

13.4 Account and service emails; no marketing. By accepting an account, an Author agrees that the Operator may send email to the address associated with the account for purposes related to the Site, such as account and security messages, password resets, editorial review and draft-status notices, notices of changes to these Terms or the Supplemental Policies, and responses to your inquiries. The Operator does not send advertising or marketing messages and does not contact you by telephone or text message. Some categories of email (such as review notifications) may be switched off in your preferences; notices about these Terms, legal notices, and security messages may be sent regardless. You represent that you own or are authorized to use the email address you give the Operator.

14. Modifications to These Terms

The Operator reserves the right, in its sole discretion, to modify these Terms at any time. Modifications become effective upon posting on this page, and the "Last Updated" date above will be revised accordingly. Your continued access to or use of the Site after modifications are posted constitutes your acceptance of the modified Terms. You are responsible for reviewing these Terms periodically; prior versions are available through this page's history. No modification revokes any license granted under the License before the effective date of that modification.

15. Governing Law and General Provisions

15.1 Governing law. These Terms, and any dispute arising out of or relating to them or to the Site, are governed by the laws of the State of California, United States of America, without regard to its conflict-of-laws principles.

15.2 Jurisdiction and venue. Subject to Sections 15.3 and 15.12 through 15.15, you irrevocably consent to the exclusive jurisdiction and venue of the state and federal courts located in the State of California for any such dispute, and waive any objection based on inconvenient forum.

15.3 Equitable relief. Notwithstanding Sections 15.2 and 15.12, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent or restrain any actual or threatened violation of these Terms, infringement or misappropriation of intellectual property rights, or misuse of the Site.

15.4 Severability. If any provision of these Terms is held to be invalid, illegal, or unenforceable, that provision shall be enforced to the maximum extent permissible and the remaining provisions shall continue in full force and effect.

15.5 No waiver. The failure of the Operator to exercise or enforce any right or provision of these Terms does not constitute a waiver of that right or provision. Any waiver must be in writing and signed by the Operator to be effective.

15.6 Entire agreement; order of precedence. These Terms, together with the Supplemental Policies and, as to Content, the License, constitute the entire agreement between you and the Operator regarding the Site and supersede all prior or contemporaneous understandings on that subject. In the event of a conflict, (a) the License governs the rights granted in Content, and (b) otherwise, these Terms prevail over the Supplemental Policies.

15.7 Assignment. You may not assign or transfer these Terms or any rights under them without the Operator's prior written consent, and any purported assignment in violation of this Section is void. The Operator may assign these Terms, in whole or in part, without notice.

15.8 Third-party beneficiaries. Except that the WikiCyber Parties are intended third-party beneficiaries of Sections 11 and 12, these Terms confer no rights on any person other than you and the Operator.

15.9 Force majeure. The Operator shall not be liable for any failure or delay in performance caused by events beyond its reasonable control, including failures of internet, hosting, or power services, labor disputes, natural disasters, governmental action, or attacks on the Site.

15.10 Digital identity and age-verification laws. The Site is operated from the United States, does not require or collect government-issued identification or biometric data, and does not perform age or identity verification. If you are located in, or are a resident or citizen of, a country or region whose laws require a website or online service to implement digital identity, government-ID, or age-verification measures in order to serve its users (for example, the United Kingdom or Australia), you agree that you will not access or use the Site or its services while those requirements apply. You are responsible for determining whether the laws of your location impose such requirements. The Operator does not implement such measures and does not accept that those laws apply to the Operator or the Site. The Operator may block or restrict access from any country or region at any time and without notice.

15.11 Survival. Sections that by their nature should survive the termination of your access to the Site shall so survive, including Sections 2, 3.7, 3.8, 3.9(c), 4, 5, 6, 7, 8, 9, 11, 12, 13, and 15.

15.12 Informal resolution and binding arbitration.

(a) Informal resolution first. Before starting an arbitration, a party must send the other a written notice describing the dispute and the relief sought (to the Operator, at the address in Section 13.1; to you, at the email address associated with your account), and the parties will try in good faith to resolve it informally for at least thirty (30) days after the notice is received.
(b) Agreement to arbitrate. If a dispute is not resolved within that period, then, except as provided in Section 15.12(e) and Section 15.15, you and the Operator agree that any dispute, claim, or controversy arising out of or relating to these Terms, the Site, or the Content, whether based in contract, tort, statute, or otherwise, will be resolved exclusively by final and binding arbitration on an individual basis, and not in court before a judge or jury. This Section 15.12 is governed by the Federal Arbitration Act (9 U.S.C. § 1 et seq.).
(c) Rules and administrator. The arbitration will be administered by the American Arbitration Association ("AAA") under its Consumer Arbitration Rules in effect when the arbitration is started, as modified by this Section. The rules and filing instructions are available at https://www.adr.org. The arbitration will be conducted by a single arbitrator, in writing or by video or telephone conference, unless the arbitrator decides that an in-person hearing is necessary, in which case it will be held in the county where you live or another place that the parties agree on.
(d) Costs. Fees and costs will be allocated under the AAA Consumer Arbitration Rules. If those rules would require you to pay more than you would have paid to file a lawsuit in the state court of the county where you live, the Operator will pay the excess. Each party bears its own attorneys' fees, except where applicable law or the arbitrator's authority under this Section permits an award of fees.
(e) Exceptions. Either party may (i) bring an individual claim in small claims court if the claim qualifies; (ii) seek injunctive or other equitable relief under Section 15.3; and (iii) bring a claim for public injunctive relief only in court, as provided in Section 15.14.
(f) Authority of the arbitrator. The arbitrator may award any individual relief that a court could award on the claims properly before the arbitrator, but may not award relief for or against anyone who is not a party. The arbitrator's decision is final, and a court having jurisdiction may enter judgment on it. The arbitrator, and not a court, decides whether a dispute falls within this Section 15.12, except that a court decides whether Section 15.13 (class action waiver) is enforceable.

15.13 Class action and jury waiver. To the fullest extent permitted by applicable law, you and the Operator each waive the right to participate in, or to receive money or other relief from, any class, collective, consolidated, representative, or private-attorney-general action or proceeding against the other, and agree that any dispute will be resolved on an individual basis only. The arbitrator may not consolidate the claims of more than one person or preside over any form of class or representative proceeding. If a court finds this Section 15.13 unenforceable as to a claim, then that claim (and only that claim) must be brought in court under Section 15.2 and not in arbitration, and the remaining claims will be arbitrated. To the fullest extent permitted by law, each party also waives any right to a jury trial in any dispute that proceeds in court.

15.14 Public injunctive relief. Nothing in this Section 15 waives any right to seek public injunctive relief that cannot lawfully be waived. If such a claim is pursued, it must be brought in court under Section 15.2, and any other claims will be arbitrated; the court action will be stayed until the arbitration has concluded, to the extent permitted by law.

15.15 Opt-out; changes; severability of Section 15.12.

(a) Opt-out. You may opt out of Sections 15.12 and 15.13 by sending the Operator a written notice, from the email address associated with your account, to the address in Section 13.1, within thirty (30) days after you first accept these Terms (or, for an existing Author, within thirty (30) days after the date these provisions are first published on the Site). The notice must state your username and that you opt out of arbitration. If you opt out, Section 15.2 applies instead of Sections 15.12 and 15.13, and the other provisions of these Terms are unaffected.
(b) Changes. If the Operator changes this Section 15 in the future, the change does not apply to any dispute for which notice under Section 15.12(a) was given before the change took effect.
(c) Minors. To the extent that a person is a minor under applicable law, Sections 15.12 and 15.13 apply only to the extent permitted by that law.
(d) Severability. If any part of Section 15.12 other than Section 15.13 is held unenforceable, that part will be severed and the rest will remain in effect.