Assalamu alaikum wa rahmatullahi wa barakatuh, dear members of our community,
We hope this message finds you in good health and strong iman.
We wanted to take a moment to speak to you directly, as one family, about something important. A short while ago, a team of security researchers reached out to us with sincerity and let us know about a few things they had noticed on our community platform, things that could have put your information or your trust at risk. We are thankful for that, because it is a form of naseeha, sincere advice, and it takes good character to point out a weakness to someone rather than exploit it or stay silent. Once we heard from them, we treated it as a duty on us to go through every corner of our platform ourselves, checking every door, every window and every lock, just to make sure everything is as safe as it should be.
In particular, we want to thank Hazem Saher (حازم ساهر) by name for bringing these findings to our attention. Jazakallahu khairan for taking the time to look out for this community.
We are grateful to say that we have gone through their findings one by one and fixed the great majority of what they pointed out. We did not want to just say "we fixed it" without telling you what that actually means, so here is a simple summary of what we worked on:
We locked away the parts that hold your data. The database where community information lives is no longer reachable from the open internet at all. Only trusted, verified access from inside our own private systems can reach it now.
We made sure messages are really from who they say they are. When our platform talks to outside services, like our email system, we now check a signed proof on every message before trusting it. If a message cannot prove where it came from, it is rejected automatically.
We kept our secret keys truly secret. Passwords, tokens and access keys are now hidden from logs and screens where they used to be visible by accident, and we tightened how they are stored and passed around.
We closed the door on unwanted visitors and bots. Our testing areas, which used to be open, now require proper verification before anyone or anything automated can poke around in them.
We protected the things you have uploaded. We found and fixed a mistake that could have accidentally wiped out community logos and images during updates. Your uploads are now protected from that kind of accident.
We made our systems more reliable. Behind the scenes, we improved how our platform handles busy moments and repeated requests, so things stay steady and dependable for you.
None of this happened because something bad occurred. It happened because we chose to be proactive, the same way a person checks the locks on their home before trouble ever knocks. We believe that taking care of an amanah, and this community is an amanah entrusted to us by all of you, means always striving to do better, even quietly and without being asked.
We also want to say something from the heart. We truly welcome your feedback, your questions and even your concerns. If something ever feels off to you, or if you simply have a suggestion, please tell us. We do not see that as criticism, we see it as a gift, and as a sign that you care about this community just as much as we do. Islam teaches us that the believers are like one body, and that we advise one another sincerely for the sake of Allah. That is exactly the spirit we want between us and you.
May Allah protect this community, bless the effort of everyone working to keep it safe, and keep us all united in good. Jazakumullahu khairan for your trust, your patience and your continued support.
If you have any questions at all, our door is always open. Please reach out any time.
Wassalamu alaikum wa rahmatullahi wa barakatuh.
