Git is working again.

No suspicious user accounts were created during the exploitable period, and no trace of suspicious activity was found during our security audit. We will run an antivirus scan and quietly monitor things, if something explodes you'll hear from us again.

We have shutdown our Gitea service for an emergency upgrade following the discovery of CVE-2026-60004 being exploitable on the service.

We did not receive notification from our usual source about this vulnerability, so we responded late. Sorry - we will do better next time. The good news is that:

• little to no sensitive data was on the server that could've been compromised (except an older prototype of Time Falcon from forever ago, go ahead and steal it lol)
• from the available data, we have no reason to believe we were actually attacked - Gitea's isolated user account has not exhibited any abnormal behavior.

Our server was, however, spammed by a CVE disclosure bot, which was what led us to this during a regular cleanup of dead accounts. So thanks to whoever did that.

We have moved Worlio Git to git.canithesis.org. All systems (except email notifications) are working as they did before, however you will need to change the URL on any SSH remotes in your Git clones to continue using them:

gitea@worlio.com:port --> git@ canithesis.org:22067

HTTP remotes will redirect automatically.

When email notifications and Checkpoint anti-spam are restored, we will test public registrations for the first time to see if it is viable. Rest assured that genuine accounts made during this period will not be deleted in the future if we walk back on this idea.

Now that april fools is done, let's see... It looks like a new blog post is in order! Soon?

It is with a heavy heart that we announce TIME FALCON has been cancelled. Shmup games with wormhole travel are sadly not trendy. Instead, we will be pivoting to our new gacha battle royale "Time Waifu", which will be in Early Access for 10 years and then abandoned. Now on iOS!

test