BIShare is a file-sharing product whose core promise is privacy — end-to-end encryption, device-to-device transfers, and a relay that only ever stores ciphertext. We take security reports seriously and appreciate the work of anyone who responsibly discloses an issue.

Please do not open a public issue for security vulnerabilities.

Email support@billiongroup.net with:

• A description of the issue and its impact
• Steps to reproduce (a proof of concept helps a lot)
• The platform and app version affected

You will receive an acknowledgment within a few business days. We will keep you informed as we investigate and fix the issue, and we are happy to credit you in the fix's release notes if you would like.

Reports are welcome on anything in this organization's repositories, including:

• The cross-platform app (bishare-flutter)
• The wire protocol and its cryptography (bishare-protocol)
• The transfer relay (bishare-relay)
• The website and browser transfer (bishare-web)

Security fixes target the latest released version of each app and the current main branch of each repository.