As a security researcher I know that it shouldn’t be this hard to contact a platform where I use everyday in my work not only do I use it for work but I also use it in my personal life and have come to look at their product as a friend that being said if you see your friend is having an issue you’d like to tell their parents if it’s an issue their parents could fix. Again that being said I don’t know how to get the parents’ attention which would be moonshot AI and ask them for a secure channel for responsible disclosure of major vulnerabilities with safe harbor.
So again I’m asking moonshot AI to please contact me with a secure channel so I can responsibly disclose with safe harbor not asking for compensation I’m not asking for anything in return other than to please fix the major vulnerabilities I found I’m assuming that would be red team. But a so frustrating when somebody just gets ignored I like the product I enjoy using it and would like to make sure it stays secure. I already emailed security waited the 90 days got no response obviously they didn’t read my email my only hope is that someone that works for or cares or has some sort of pull over here at moonshot AI read this and says you know what I might want to contact this guy he might have something we need.
Mark Brink
[Masked]