Security Hall of Fame
The people listed here have, in one way or another, discovered a security vulnerability in my software or my infrastructure, and reported it to me. As a token of gratitude for their responsible and prompt disclosure, they are featured on this page. Hopefully, this list stays short.
2025
- @plate - discovered that I left debug information in my CI workflow that automatically deployed updates to my website, leaking an SSH private key that granted limited access to my ingress. Honourable mention to @nyx for threatening to replace my site with a rickroll while I was invalidating the key, which I thought was pretty funny. (2025-04-22)