About
I’m Gibby. I research security stuff. I don’t stay in one lane.
Vulnerabilities, malware, threat actors, AI security, incident response, and products making claims that seem worth checking. If somebody says a product does something interesting, I occasionally make the mistake of checking.
I write down what I find so somebody else can reproduce it, argue with it, or avoid spending an afternoon learning the same thing.
I’m not available to test systems without the owner’s permission. Go build a lab. Breaking your own things is educational.
-
Disclosure
Vendor first, ninety days from first contact, and working exploits generally aren’t published.
-
Contact
Email and PGP.
-
Colophon
Markdown, some PHP, and an RSS feed.