Regulation (EU) 2024/2847
Security and the Cyber Resilience Act
No CE mark. The Act says a product carries the CE mark only to show that it meets the requirements. The mark and the EU declaration of conformity are allowed only after a conformity assessment with a positive result. That assessment is not done for this site or for the 3D CV game. This page is not that declaration.
Pe scurt: Actul privind reziliența cibernetică este un regulament și se aplică direct, spre deosebire de directiva NIS2. Raportarea vulnerabilităților exploatate activ începe la 11 septembrie 2026 (avertizare în 24 de ore, notificare în 72 de ore). Obligațiile de produs și marcajul CE încep la 11 decembrie 2027. Aici marcajul nu este afișat, pentru că evaluarea nu este încheiată.
What is published here
This website is a personal CV, a contact form, and a browser game (the 3D CV world). They are made available by Alexandrescu Adrian Bogdan, Bucharest, Romania. They are not a shop and they are not a physical device. The same calendar is stated here so a visitor can see the status.
What the Act asks of a manufacturer
The European Commission describes the Act as the rule that connected hardware and software be designed, updated and maintained against cyber threats. In practice that means security by design and by default, a risk assessment, vulnerability handling for the support period, security updates that are timely and free, a software bill of materials where the Act requires one, and user instructions that include the end of support. Some products also need a check by a notified body before they are sold. National market-surveillance authorities enforce the rules. The Commission published practical guidance for manufacturers on 27 July 2026.
Dates that matter
- 10 December 2024. The Act entered into force. It was adopted on 23 October 2024.
- 11 June 2026. The rules on notifying conformity assessment bodies apply.
- 11 September 2026. Reporting of actively exploited vulnerabilities and severe incidents starts.
- 11 December 2027. The product duties apply, including the declaration of conformity and the CE mark, for products placed on the market from that date.
A product placed on the market before 11 December 2027 stays outside the product requirements, except the reporting duty, unless it is substantially modified. Until an assessment for this site and the game is finished, no CE mark is shown here or inside the game.
Support
Security fixes for this site and the game are applied while they stay online. A support end date, with month and year, will be written here when the Act requires it for this software. It is not guessed today.
Updating the server reduces known risk. It does not mean there are no vulnerabilities left.
Report a problem
Email [email protected] with the subject “Security”. Say what you saw and how to repeat it. Do not send passwords or someone else’s private files. Please allow a reasonable time to fix it before publishing the details.
From 11 September 2026 the official notification goes through the ENISA single reporting platform: an early warning within 24 hours, the full notification within 72 hours, then a final report within 14 days after a fix for an exploited vulnerability, or within one month of the 72-hour notice for a severe incident. That official path does not replace the email above.
A machine-readable contact is at /.well-known/security.txt.