====== Contact ======
 
  gibby at gib dot bz
 
Assembled by hand because scrapers are lazy. Encrypted mail preferred, plain mail
read either way.
 
Fingerprint: ''9BC1 A08E 333A 0E33 DF04 8C13 A894 545D 2B8B 1870''
 
<code>
-----BEGIN PGP PUBLIC KEY BLOCK-----
 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=tTgN
-----END PGP PUBLIC KEY BLOCK-----
</code>
 
Ed25519. Made 2026-09-10, expires 2028-09-09.
 
===== Disclosure =====
 
Vendor first. Every time, including when the vendor is unpleasant about it.
 
Ninety days from first contact to publication. That clock stops the moment
somebody at the vendor is actually engaged and moving, and I would rather wait a
year on a genuinely hard fix than burn a team that is doing the work. It does not
stop for silence.
 
Nothing goes up before a patch is out and has had time to land. On
internet-facing management software that means longer than you would like.
 
No exploit code. Not for old bugs, not for patched ones, not for the ones a
vendor walked away from. Root cause, reachability, detection, indicators, all of
that -- nothing runnable. Less a moral position than an arithmetic one: the people
who need a working exploit already have it, and the people who don't are the ones
who get hurt when it shows up.
 
If somebody else got there first they are named at the top of the page whether or
not it was found here independently.
 
Nothing on this site is for sale and no findings are brokered.
 
===== Don't bother =====
 
Reports about somebody else's systems. Requests to test something you do not own.
Recruiters.
 
----
 
//Last reviewed: 2026-09-10//