Hi there 👋 I'm Xu Colin.

I'm:

• Developer
• AOSC OS Maintainer
• Minecraft Modder
• Security Researcher
• Student

My Projects:

• slh-dsa: Pure Python implementation of the SLH-DSA algorithm, based on FIPS 205. Used in Trezor's Python tooling to verify SLH-DSA signatures on bootloader images. Downloaded over 200,000 times from PyPI in September 2026 alone.
• Random Optimization: A Minecraft mod that improves Minecraft's performance and fixes several bugs. With over one hundred thousand downloads, it significantly improves game startup performance.
• Huorong ATP Rules: A maintained fork of https://github.com/JerryLinLinLin/Huorong-ATP-Rules. With fewer false positives and native support for Huorong Sysdiag V6.

Security Disclosures:

• CNVD-2026-28042: High-severity local privilege escalation vulnerability in Mythware.

GPG Keys:

• 81357B654FBEF2AD009CEB3A30CAD8CC8FD6EE77. Used to sign objects since February 20, 2026.
• 91D457323E072289B5D4097D8CF3D47435C07513 and 496DF055B36263100311E4D14645C1827AB4990C. Used to sign commits between December 10, 2025 and February 20, 2026.

Contacts:

• Email: colinxu2020@gmail.com and me@pulldown.dev.
• Telegram: @pulldowndev.
• Legacy Telegram: @colinxu2020.