Security at Project 404

Security isn’t just a buzzword here, it’s baked into every part of Project 404. Here’s how your files, bookmarks, and account are protected:

Key Security Features

1. End-to-End HTTPS
All traffic is encrypted with HTTPS (TLS), so your uploads, downloads, and logins are safe from eavesdroppers.
2. Password-Protected & Encrypted Files
When you set a password on a file, it’s encrypted at rest using strong cryptography. Only those with the password can decrypt and access the file. No password? Still private, but not encrypted at rest.
3. No Logging, No Tracking
There’s no analytics, no tracking, and no logs of your activity. Your privacy is respected by design.
4. Session Security
Sessions use secure, random tokens. Only one session per user is allowed at a time, and sessions expire automatically after a set period.
5. Input Sanitization
All user input (file names, URLs, titles, etc.) is sanitized and validated to prevent XSS, SQL injection, and other attacks.
6. File Scanning
Uploaded files are checked for malware and viruses before being made available for download.
7. Account Security
Passwords are hashed using industry-standard algorithms (bcrypt). Registration and login are rate-limited to prevent brute-force attacks.
8. Abuse Reporting
Anyone can report abusive or illegal content. Admins review and remove files that violate the rules.
9. No JavaScript Required
All features work without JavaScript, reducing the attack surface for browser-based exploits.
10. Open Source
All code is available on GitHub for transparency and community review.

How It’s Implemented

Responsible Disclosure

If you find a security issue or vulnerability, please email security@dasho.dev or open an issue on GitHub. Responsible disclosure is appreciated!

BlackHat - Unauthorized Access

You need to be logged in to access the underground. Login here.