Security
Report a security issue
If you find a way to read someone's photos or keys, impersonate a member, or get around the album rules, I want to hear it first.
How to report
Message me privately on Signal at freya.47. Signal is where I reply fastest. If Signal does not work for you, email uExistentialist@proton.me, message freytastic on Discord, or send a direct message to freytastic_ on X.
Please reach me privately first instead of opening a public GitHub issue.
What to report
Anything that weakens the protection of photos, keys or member identity: flaws in the protocol, missing authorization checks, key handling mistakes, and bugs in the app or the server.
Before you report
Some limits are known and written down on What Miuchio does not protect. A report is most useful when it shows something that differs from what those pages describe.
Testing safely
Only test against accounts and albums you own. Never access another person's albums or data.