whoami

I find and disclose security vulnerabilities in software. This page is where I publish advisories for the issues I've reported, once a fix is available or a coordinated disclosure deadline has passed.

If you maintain something I've reported a bug in and need to reach me, or want to verify a report came from me, see contact. My PGP key is below.

ls -l advisories/

Nothing published yet.

Advisories appear here once a fix is available or a coordinated disclosure deadline has passed.

More advisories are added here as embargoes lift. Older coordinated reports that vendors asked to keep private are not listed. There is an Atom feed if you would rather be told when one is published.

cat contact.txt

Email is the best way to reach me. Encrypt anything sensitive with the key below.

email
nick@londal.co
pgp
public key 2AEC 2B7A 5F41 52F6 0235 4232 CAB3 DEE6 4423 9999
verify
curl -s https://nick.londal.co/pgp.txt | gpg --show-keys
github
nilondal