Skip to content
View mostlygino's full-sized avatar
💭
404: Status not found, but my code creativity is still alive and well.
💭
404: Status not found, but my code creativity is still alive and well.
  • behind a VPN

Block or report mostlygino

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
mostlygino/README.md
Gino. Security Engineer, behind a VPN. The mostlygino.com app icon.

Showreel More Contact mostlygino.com

The person between your data and a very bad day. I break into things, legally, mostly. Then I build the tools the defenders actually use, and write the policy that keeps them honest. Security tools, personal projects, and the principles behind them: ownership, evidence, and a human with the final say.

9 projects in the reel; a redacted number of coverage cells an AI must fill; a redacted number of report cards per indicator; 3 operating systems, one toolbox; 0 accessibility errors on mostlygino.com; 0 external LLM APIs in the T&S tools.


Showreel

Enma app icon Gravedigger app icon Hettie app icon Relay app icon Tsukumo app icon Kuro app icon Shīru app icon Onmitsu privacy scanner icon

Showreel: mostlygino.com, enma, Gravedigger, Hettie, Relay, Tsukumo, Kuro, Shīru, Onmitsu, and a classified file

mostlygino.com: My site. Pretty interfaces, ugly threat models. Latest: A terminal that opens like an app, a CTF with signed certificates, and /declassify for the lines I can't print. enma: An autonomous penetration tester that can't lie about what it tested. Latest: Rebuilt as the judge of the underworld: a ledger, a mirror and a verdict it withholds until every cell is proven.

Gravedigger: Paste an indicator, get the whole story. Self-hosted abuse triage. Latest: Dozens of checks per scan, run in parallel, and a briefing that only speaks about what was actually checked. Hettie: Cited answers from your own wiki. TLP-aware and self-hosted. Latest: Search went from 252 ms to 70 ms at the median, on an index 40% smaller.

Relay: A keyboard-first ticket console you'd actually want to work in. Latest: 16 ⌘ shortcuts, a demo mode, and AI drafts a human still has to send. Tsukumo: A script toolbox for networks, abuse handling and daily chores, behind one TUI. Latest: v1.0: one installer, three profiles, the same result on bash and PowerShell.

Kuro: A minimal, void-like macOS desktop with drawn badges and motion everywhere. Latest: Drawn Wi-Fi, battery and coffee badges with live cards, and a bar that renews its own Claude login. Onmitsu: Personal exposure intelligence. Stack direction: Next.js, PostgreSQL, Python and Tor for public-web and selected onion-source research.

Shīru: Native OpenPGP for the Mac. Encrypt, sign and manage keys, with YubiKey support. Latest: Post-quantum encryption, a Touch ID passphrase helper, and signed updates checked before install. Stack: Swift, SwiftUI, AppKit, GnuPG. A classified project: some work can't be named in public. Ask for the file.

Source is private, walkthroughs on request. And more, under bars: for the redacted details, get in touch.

How I build: the AI never has the last word; fail closed; missing is not clean; keys stay on the server; self-hosted by default; keyboard first. Where each rule shows is redacted. Stories worth asking about: what broke and what fixed it in enma, Gravedigger, Hettie and one more. Classified; ask.


More

mostlygino.com: Pretty interfaces, ugly threat models. Who I am, what I use, and a few things to find. Visit the site.


Contact

Get in touch: hello@mostlygino.com. A walkthrough of a project, or the details behind a redacted line. Just ask.

PGP key for hello@mostlygino.com, ed25519. Fingerprint 339A 0B04 A8B0 EDD4 A7F9 434E 6A3A D939 5C3A 3E4F. Download the .asc. PGP key for security@mostlygino.com, ed25519. Fingerprint AE4A 744A E08C 3B75 D563 B9B7 1E10 6479 5299 BF97. Download the .asc.


Built with love by Gino — security engineer and maker. Visit mostlygino.com.

© 2026 Gino. Icons, artwork, signature and code: all rights reserved. See LICENSE.

@mostlygino's activity is private