gooncave has ceased operations.

AI has made finding and exploiting software flaws cheap and fast. On 21 October, AI-discovered bugs in PHP pushed governments, banks and Wikipedia offline, with exploit attempts in the millions within hours. The same day, Node.js, which gooncave runs on, shipped ten security fixes, including a remote code execution flaw reported by an AI security tool.

gooncave ran on logged-in sessions of my personal Telegram accounts and kept an archive of their chats, including messages from everyone in them. A single breach would hand over both. With exploits now landing within hours of disclosure, that's not a risk I'm willing to keep running, so I've shut gooncave down for good.

Thank you for being part of it.

— the gooncave admin