2025-12-02
Contact me (secure)
- Email: [email protected]
- PGP pubkey: horse.pub
- How to email me? Anonymous email recommended. Using PGP encryption recommended.
- Why email me?
- Any purpose is welcome, as long it benefits you or me.
- Unless your matter is high stakes, you probably don't need to contact me on this address, just use my gmail or Signal instead. I do not check emails on this address frequently, as mentioned below.
- Frequency of checking emails: Last checked 2025-12-02. I will check my emails atleast once in three months.
- Warrant canary: Last updated 2025-12-02. I have not received any legal request involving data or server access to samuelshadrach.com. I will update this paragraph atleast once in three months.
- Proof of identity: to do
- Overall security: Medium
- If you need highest possible security: I do not have security setup sufficient for this. Submit to a SecureDrop server or use it to meet the journalist in-person. Journalists at orgs operating SecureDrop likely have previous experience dealing with anonymous high-stakes submissions.
- If you are sending me leaked information or documents, I might redact it and send it to potential publishers running SecureDrop. I will probably not be able to publish any information myself.
Security practises followed
Security, digital
- Dedicated PC for this purpose.
- Inbox and keys accessed on TAILS only.
- 128-bit memorised seedphrase (never used outside of tails) + 128-bit seedphrase in secure physical location (never used outside of tails) + PGP privkey (has left tails). All 3 pieces of info required to decrypt.
- All emails are deleted within 1 month of being read.
Security, physical
- This inbox is only operated from secure physical location. Seedphrase (mentioned above) stored in secure physical location.
- I do not live 24x7 in a secure physical location. I visit secure location to operate the inbox.
Legal
- Do not have significant legal budget
- Likely to cooperate with law enforcement in case of investigation. Discretion used on case by case basis.
Social / psychological
- Operating solo. No dedicated team
- Only operating part-time not full-time
- No social isolation practised
- Keeping secrets solo may be psychologically unsafe
Server host
- Proton may be preserving email content and metadata (timestamps, file sizes, email addresses used, browser fingerprints, etc)
- Proton has previously cooperated with law enforcement in investigations
- Proton has never encountered a significant breach of data or passwords, as of 2025-06
Subscribe
Enter email or phone number to subscribe. You will receive atmost one update per month
Comment
Enter comment