Security: adi2011/lightning

Security

SECURITY.md

Security Policy

Supported Versions

We have a 3 month release cycle, and the last two versions are supported.

Reporting a Vulnerability

To report security vulnerabilities, please send an email to one of the following addresses:

  • rusty@rustcorp.com.au
  • security@blockstream.com

Note: These email addresses are exclusively for vulnerability reporting.

For all other inquiries/communication, please refer to the Reach Out to Us section in our README.

Signatures For Releases

The following keys may be used to communicate sensitive information to developers, and to validate signatures on releases:

NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852

You can import a key by running the following command with that individual’s fingerprint: gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>". Ensure that you put quotes around fingerprints containing spaces.

There aren't any published security advisories

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Security: adi2011/lightning
Security

SECURITY.md

Security Policy
Supported Versions
We have a 3 month release cycle, and the last two versions are supported.
Reporting a Vulnerability
To report security vulnerabilities, please send an email to one of the following addresses:
  • rusty@rustcorp.com.au
  • security@blockstream.com
Note: These email addresses are exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the Reach Out to Us section in our README.
Signatures For Releases
The following keys may be used to communicate sensitive information to
developers, and to validate signatures on releases:
NameEmailFingerprint
Blockstream Security Reportingsecurity@blockstream.com1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Rusty Russellrusty@rustcorp.com.au15EE 8D6C AB0E 7F0C F999 BFCB D920 0E6C D1AD B8F1
Christian Deckerdecker@blockstream.comB731 AAC5 21B0 1385 9313 F674 A26D 6D9F E088 ED58
Lisa Neigutniftynei@gmail.com30DE 693A E0DE 9E37 B3E7 EB6B BFF0 F678 10C1 EED1
Alex Myersalex@endothermic.dev0437 4E42 789B BBA9 462E 4767 F3BF 63F2 7474 36AB
Peter Neurothpet.v.ne@gmail.com653B 19F3 3DF7 EFF3 E9D1 C94C C3F2 1EE3 87FF 4CD2
Shahana Farooquisfarooqui@blockstream.comFE13 58EB 7793 51DB 24E5 555A A327 573C 9758 9BF5
Blockstream CLN Releasecln@blockstream.com616C 52F9 9D06 12B2 A151 B107 4129 A994 AA7E 9852
You can import a key by running the following command with that individual’s fingerprint:
gpg --keyserver hkps://keys.openpgp.org --recv-keys "<fingerprint>".
Ensure that you put quotes around fingerprints containing spaces.
 There aren't any published security advisories