@cendyne Ohai!

I have a request for some free work! I could've said "can you help with an open-source project", but that's just the same thing in a trenchcoat...

I'm helping with a tiny open-source project called Hister, currently clocking at a few thousand lines of AGPL'd Go (AFAICT, none of which was vibe-coded). The short story is "self-hosted full-text history indexing for later searching".

It has a client-server architecture, and I want to make sure that the security is at least good enough, since it deals with mostly-full-text history... I think the current model is fine, but I'm worried we might be blindsided. I've read your writings, and I think you're cool plus good and experienced at infosec, so I was hoping the project could benefit from (hopefully no more than) a few hours of your time! Pwetty pwease?

(But, since there's no compensation or anything, if you say no then I won't bug you, ofc.)

Oh, uh, btw, your website's contact page still lists your handle as @cendyne.dev despite linking to furry.engineer. Is that intentional?