Skip to content

Security: mearvk/Java.Web.Server.Telnet.Front.Java.21

Security

Report a vulnerability

SECURITY.md

Security Policy

Owner: Max Rupplin — MEARVK LLC Phone: 1.919.923.4239 (USA) Headquarters: 555 South Mangum St, Durham, NC 27701 Contact:mearvk@mearvk.us | mearvk@outlook.com

Supported Versions

EditionVersionSupported
Personal Executive1.x✅
National1.x✅
International1.x✅
Free1.x✅

Authorization & Key Verification

All programs verify operational authorization via psychiatry/secrets/public.key on the central GitHub repository.

  • public.key present on GitHub → Software authorized to operate
  • public.key removed from GitHub → All installations revoked
  • secret.key → NEVER pushed; retained locally by Owner only

Programs & Security Scope

Core

ProgramPortsSecurity Notes
NitroWebExpress™49152Main server. public.key boot verification.
NIO Masquerade Layer127.0.0.1–17NIO selector, local IP bindings only.
NWE Key Listener80Byte-for-byte public.key comparison. 30-min timeout.
NWE Module Installer8888JAR signature validation (PK magic + SHA-256).

Encryption

ProgramPortsSecurity Notes
AesCompliant5512AES encryption module. Key material in memory only.
RsaCompliant7743RSA keypair. Private keys never serialized to disk.
DsaCompliant7744DSA signing.
BitcoinCompliant6682Wallet indexer. Trade session state isolated.
NationalFinanceID49152Keypair generator + profile cache. NationalID gated.

Inference & AI

ProgramPortsSecurity Notes
Strernary™20000DJL/PyTorch inference. No outbound data exfil.
Strernary™ Directory2000public.key verification for Rank 4 registration.
AIProctorModule™49111NationalID session verification.
CityAnalysis™—IQ-gated (180+). Belt requirement (Green/Brown).

International Signal Servers

ProgramPortsSecurity Notes
JapanSignalServer™49201Outbound fetch only. No inbound data acceptance.
RussiaSignalServer™49202Same isolation model.
MexicoSignalServer™49203Same isolation model.
GreeceInternationalSignalServer™49204Same isolation model.

Modules/Black (Trusted 9.5+/10)

ProgramPortsSecurity Notes
Futures™5000Secure random wait. DJL inference. RSA-2048+/DH-2048. SHA-256 integrity (16 files). Masquerade-aware.
Green.Durham.Grass.and.Herb™2000, 20000, 40002–49152JWSTFJ21 masquerade-integrated. NationalID gate on port 20000. GeoLite2 geo-resolution.
Brarner.M.Alete™49152Maven multi-module. Servlet website. NC postal signal processing (40+ cities). SSA/TN signal nodes.

Module documentation:

  • modules/black/red/Futures/README.md
  • modules/black/presidential/Green.Durham.Grass.and.Herb/README.md
  • modules/AE6E66/README.md

Port Registries

ProgramPortsSecurity Notes
GrayPortRegistry™9999AI binary gate per port binding. Bitcoin/Dashcoin payment verification.
Gray85 Crème Registry1008515% Crème-locked ports ($1000 unlock). Planetary auditor control.

AE6E66 (House of Lords + Commons)

ProgramPortsSecurity Notes
AE6E66Main—Web crawl only (0–999 IDs). No inbound listener. 30-day crawl skip.
EmailDistributorlocalhost:25Local Postfix SMTP. DKIM-signed via mail.lauradei.us. Rate-limited (2s/msg).

Mail server:mail.lauradei.us @ 45.32.31.139 — Postfix + Dovecot + OpenDKIM. Loopback submission only. Documentation:modules/AE6E66/README.md, modules/AE6E66/AE6E66.RDRS

Module Documentation Index

ModulePath.md
Futures™modules/black/red/Futures/README.md
Green.Durham.Grass.and.Herb™modules/black/presidential/Green.Durham.Grass.and.Herb/README.md
Brarner.M.Alete™modules/black/presidential/Brarner.M.Alete/— (build.bat)
GrayPortRegistry™modules/gray/—
Gray85 Crème Registrymodules/gray.a85/—
AE6E66modules/AE6E66/README.md, AE6E66.RDRS

Network Security

RuleDetail
Outbound ports21, 22, 80, 443, 8080, 8888
InboundOnly managed ports via NIO Masquerade
Local bindings127.0.0.1–127.0.0.17 (extended mode)
TLSOpportunistic outbound (smtp_tls_security_level = may)
Rate limiting2s destination delay, concurrency limit 2 (SMTP)

Reporting a Vulnerability

Report security issues directly:

Response within 48 hours. Critical vulnerabilities patched within 24 hours of confirmation.

Key Files (Do Not Expose)

FileStatus
psychiatry/secrets/secret.keyNEVER committed. Local owner copy only.
psychiatry/secrets/public.keyOn GitHub. Removal = revocation.
/etc/opendkim/keys/lauradei.us/ae6e66.privateDKIM private key. Server-local only.
modules/AE6E66/configuration/.last-crawlNon-sensitive. Crawl timestamp.

Trust Ratings

All modules authored by Max Rupplin rated 9.5+/10. Masquerade routing enabled globally.

There aren't any published security advisories