I hack things and build the tools I wish existed. Linux kernel exploitation, Windows kernel fuzzing, TP-Link firmware, FPGA cryptanalysis, hardware wallets built on silicon secure elements, and a Tor exit relay I've run for years.
Before feeds. Before platforms. When nothing was abstracted and every mistake left a scar. I fuzz Windows kernel drivers until they bluescreen, crack hashes on bare FPGAs, build hardware wallets from secure elements because nobody else was going to do it right, and run exit bandwidth because anonymity doesn't work without volunteers. I don't do corporate security theater.
Recent Linux kernel work — independent discovery, exploit development, responsible disclosure. Full research & citations →
Steal SSH host keys & /etc/shadow via the ptrace mm-NULL window + pidfd_getfd. Exploit by me; vuln reported by Qualys. Cited in the U-M Safe Computing advisory.
Unprivileged root via xfrm ESP MSG_SPLICE_PAGES page-cache write. Independently discovered from public commits — named & quoted in iTnews.
TP-Link firmware decryption at scale — 52,609 images. The verify key is the decrypt key.
Windows kernel research — fuzzers, DoS bugs in system drivers, local privilege escalation.
DoS in vfpext.sys — the Hyper-V virtual switch extension. Found with a custom fuzzer I wrote before I even read the writeup. Fuzzer works.
Local DoS in wfplwfs.sys, Windows 8.1 through 11. Reported to MSRC, rated medium, closed without fix.
Dumb-but-effective IOCTL fuzzer for Windows device drivers. Point it at a handle, let it rip.
Admin → NT AUTHORITY\SYSTEM. Local privilege escalation on Windows 10/11.
Hash cracking, cipher recovery, and parallelism measured in LUTs and BRAMs. Zybo Z7-20 as weapon.
FPGA NTLM hash cracker. Hardware password recovery on a Zybo Z7-20.
50 parallel MD5 cores on Zybo Z7-20 (XC7Z020). ~60M hashes/sec. Brute-force at the gate level.
FPGA DES key recovery. Because DES deserves to die in hardware too.
Bitcoin wallets on NXP secure elements, on constrained microcontrollers, and all the glue to make them actually work.
Open-source Bitcoin hardware wallet on the NXP SE050 secure element. Custom SCP03 comms, hardware key isolation, TRNG-sourced BIP39 entropy. Keys in silicon — no extraction, no export.
Stateless Bitcoin wallet generator on ESP32. Entropy quality and key generation on constrained hardware.
NXP SE050 Plug & Trust middleware so you don't have to dig it out of NXP's labyrinth yourself.
Because writing to HDMI from pure Verilog is its own kind of joy.
10-track MOD chiptune jukebox with parallax night-city skyline. Zybo Z7-20, HDMI 720p.
Music-reactive fractals synced to MOD chiptune playback. HDMI 720p on bare FPGA.
Anonymity only works when people actually run the infrastructure. I've been running exit bandwidth for years.
black.host supports Tor operators without flinching. If you want to run exit bandwidth, start there. If you benefit from Tor, consider hosting a node of your own.
Christian anarchist. Yeah, I know how that sounds — like a contradiction, unless you've read 1 Samuel 8. Israel begged God for a king like the other nations, and He told Samuel: they haven't rejected you, they've rejected Me. Then the warning label — he'll take your sons for his army and your fields for his taxes. Every state since has shipped with the same feature list. Jesus refused every crown offered to Him, told Pilate His kingdom was not of this world, and put away the sword. Tolstoy ran the same math in The Kingdom of God Is Within You. I take all of it literally.
What that entails: no flag above the cross, and no Caesar with a claim on my conscience. The government is not your friend and never was — 1 Samuel 8 is the original threat model. So you do it yourself, face to face. Build with your hands, provide for your family; that duty is mine, not an agency's. Keep the door open. Feed people, carry your neighbor's load, give without a form and without a camera. Voluntary community, mutual aid, works of mercy — mercy taxed out of your paycheck and administered by a bureau is not mercy anymore. Some people think anarchy means chaos. I think it means responsibility: nobody gets to outsource love to an institution.
I love my family. I love my cats. I watch the birds outside. I read scripture and I read RFCs. I don't think those things are in conflict.
Handles, keys, and how to send something that won't land in the wrong inbox.