Skip to content
Forum

Ask anything. Beginner questions are the point.

A place to ask what something means, recommend a skill, report a false positive, or say that a rule got it wrong. Nothing here assumes you already know the vocabulary.

An account here is an email address and a password. Firebase stores the password, hashed — this site never sees it and cannot lose it.

Loading…

Categories

Help & questions

Anything you want to understand. No question is too basic.

Skills

Recommend one, ask whether one is any good, or submit one for the index.

False positives

AIRLOCK flagged something harmless. The most useful report there is.

Misses

It passed something it should have caught. Worth even more.

Ideas

Rules, features, or something the tools should do and do not.

Showcase

Something you built or found. NEXUS setups welcome.

House rules, short version

  • Assume the person asking is smart and new. Both at once.
  • Answer the question that was asked before the one you wish had been.
  • No “just google it”. If it were obvious they would not be here.
  • Never post credentials, tokens or private files — not even redacted, not even as an example.
  • A finding is about a file, not about the person who wrote it.

What the forum stores

Your email address, a display name you choose, and what you post. The password is hashed by Firebase and never reaches this site. Posts and profiles live in Firestore in the EU; Firebase Authentication itself runs in the US, so the account record and sign-in logs are processed there. Reading the forum needs no account and writes nothing to your device — the sign-in machinery only loads when you use it.

Found something serious?

If you believe something is actively exploitable, do not open a public thread. Use the private security advisory form — it reaches me and nobody else until there is a fix.