Uplink

Contact

Security reports get priority and a reply within 72 hours. Everything else, best effort.

Email: [email protected] General contact and vulnerability reports.
Code: git.him.is Self-hosted Gitea. Issues and patches welcome on public repos.
PGP: For anything sensitive, encrypt it. Fingerprint below — replace with your real key before publishing.
0000 0000 0000 0000 0000 0000 0000 0000 0000 0000

Policy

Responsible disclosure

If you have found a vulnerability in something I run, send the details to the address above. Include reproduction steps and the impact as you understand it.

I will confirm receipt, agree a disclosure timeline with you, and credit you in the writeup unless you would rather stay anonymous. Please give me a reasonable window to ship a fix before publishing.