about:contact

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

about:contact [2023/06/03 21:40] – created - external edit 127.0.0.1about:contact [2026/09/10 06:08] (current) – gibby
Line 1: Line 1:
-====== About ====== +====== Contact ====== 
-Cybersecurity Professional that dabbles in a lot of things. Currently employed at a company that does a lot of different stuff.  +  
- +  gibby at gib dot bz 
-In what little spare time I have left I work on small projects-- generally RasPi-based-- and home brewing.  +  
- +Assembled by hand because scrapers are lazy. Encrypted mail preferred, plain mail 
-These are my adventures. +read either way. 
 +  
 +Fingerprint: ''9BC1 A08E 333A 0E33 DF04 8C13 A894 545D 2B8B 1870'' 
 +  
 +<code> 
 +-----BEGIN PGP PUBLIC KEY BLOCK----- 
 +  
 +mDMEaqI8DhYJKwYBBAHaRw8BAQdAI93MDGNXFWHbXSebj72acfJ7+MGfWZXjaZkn 
 +4eTzFva0FEdpYmJ5IDxnaWJieUBnaWIuYno+iLUEExYKAF0WIQSbwaCOMzoOM98E 
 +jBOolFRdK4sYcAUCaqI8DhsUgAAAAAAEAA5tYW51MiwyLjUrMS4xMiwyLDECGwMF 
 +CQPCZwAFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQqJRUXSuLGHDQ7QEA 
 +6I7BsOjC5ghYVm3QviqLUqmIdrk4O6uSh5hjY5cIOBQBAMcGyZV5HuOLmVNl9Ojs 
 +yZG7rqLUly1UAZcBZExPNngDuDgEaqI8DhIKKwYBBAGXVQEFAQEHQOonmAEZzfjd 
 +kD3H5BLWb+TaQXAz/6IAP1egkyqumnlhAwEIB4iaBBgWCgBCFiEEm8GgjjM6DjPf 
 +BIwTqJRUXSuLGHAFAmqiPA4bFIAAAAAABAAObWFudTIsMi41KzEuMTIsMiwxAhsM 
 +BQkDwmcAAAoJEKiUVF0rixhwIioA/2tWGrhREN/Igsf/foIJnoEbXkkrPCyssWSM 
 +bBCHgeorAPwJzwnvOdvbLVM0aKlRs4K79T2lDZarBlSczFafwErJBA== 
 +=tTgN 
 +-----END PGP PUBLIC KEY BLOCK----- 
 +</code> 
 +  
 +Ed25519. Made 2026-09-10, expires 2028-09-09. 
 +  
 +===== Disclosure ===== 
 +  
 +Vendor first. Every time, including when the vendor is unpleasant about it. 
 +  
 +Ninety days from first contact to publication. That clock stops the moment 
 +somebody at the vendor is actually engaged and moving, and I would rather wait a 
 +year on a genuinely hard fix than burn a team that is doing the work. It does not 
 +stop for silence. 
 +  
 +Nothing goes up before a patch is out and has had time to land. On 
 +internet-facing management software that means longer than you would like. 
 +  
 +No exploit code. Not for old bugs, not for patched ones, not for the ones a 
 +vendor walked away from. Root cause, reachability, detection, indicators, all of 
 +that -- nothing runnable. Less a moral position than an arithmetic one: the people 
 +who need a working exploit already have it, and the people who don't are the ones 
 +who get hurt when it shows up. 
 +  
 +If somebody else got there first they are named at the top of the page whether or 
 +not it was found here independently. 
 +  
 +Nothing on this site is for sale and no findings are brokered. 
 +  
 +===== Don't bother ===== 
 +  
 +Reports about somebody else's systems. Requests to test something you do not own. 
 +Recruiters. 
 +  
 +---- 
 +  
 +//Last reviewed: 2026-09-10//