2025-12-02

# Contact me (secure)

 - **Email: samuel.da.shadrach.1@proton.me**
 - **PGP pubkey: [horse.pub](./horse.pub.md)**
 - **How to email me?** Anonymous email recommended. Using PGP encryption recommended.
 - **Why email me?**
   - Any purpose is welcome, as long it benefits you or me.
   - Unless your matter is high stakes, you probably don't need to contact me on this address, just use my gmail or Signal instead. I do not check emails on this address frequently, as mentioned below. 
 - **Frequency of checking emails: Last checked 2025-12-02.** I will check my emails atleast once in three months. 
 - **Warrant canary: Last updated 2025-12-02.** I have not received any legal request involving data or server access to samuelshadrach.com. I will update this paragraph atleast once in three months.
 - **Proof of identity:** to do
 - **Overall security: Medium**
   - If you need highest possible security: I do not have security setup sufficient for this. Submit to a [SecureDrop server](https://securedrop.org/directory/) or use it to meet the journalist in-person. Journalists at orgs operating SecureDrop likely have previous experience dealing with anonymous high-stakes submissions.
   - If you are sending me leaked information or documents, I might redact it and send it to potential publishers running SecureDrop. I will probably not be able to publish any information myself.

## Security practises followed

Security, digital
 - Dedicated PC for this purpose.
 - Inbox and keys accessed on TAILS only.
 - 128-bit memorised seedphrase (never used outside of tails) + 128-bit seedphrase in secure physical location (never used outside of tails) + PGP privkey (has left tails). All 3 pieces of info required to decrypt.
 - All emails are deleted within 1 month of being read.

Security, physical
 - This inbox is only operated from secure physical location. Seedphrase (mentioned above) stored in secure physical location.
 - I do not live 24x7 in a secure physical location. I visit secure location to operate the inbox.

Legal
 - Do not have significant legal budget
 - Likely to cooperate with law enforcement in case of investigation. Discretion used on case by case basis.

Social / psychological
 - Operating solo. No dedicated team
 - Only operating part-time not full-time
 - No social isolation practised
 - Keeping secrets solo may be psychologically unsafe

Server host
 - Proton may be preserving email content and metadata (timestamps, file sizes, email addresses used, browser fingerprints, etc)
 - Proton has previously cooperated with law enforcement in investigations
 - Proton has never encountered a significant breach of data or passwords, as of 2025-06
