I was not aware of this. Huge props to @Canonical for hiring a company that knows their stuff and getting @gf_256 on this, who's an amazing cybersec researcher and top notch CTF player.
Remember the security firm that Ubuntu hired to audit the (ill-advised, highly buggy) Rust-rewrites of all of the GNU Coreutils?
Turns out that security firm is run by @gf_256, who:
- Appears to be a man who thinks he's a woman ("trans").
- Uses an anime cartoon of a girl as his avatar.
- Appears to have an OnlyFans page.
I repeat: Ubuntu hired a "Trans" man, with an anime girl avatar and an OnlyFans page... to audit Rust code.
It's hard to get more on-the-nose than that.
May 2, 2026 · 4:38 PM UTC
