A FEW THINGS I’VE MADE
From idea to “it works.”
Experiments in application security, privacy, and understanding how systems behave.
Guardrail
A full-stack lab for exploring XSS, prompt-injection simulations, and authentication controls.
Inside the project +
How it works
React and TypeScript on Cloudflare Workers. Isolated browser probes and signed-session checks cover tampering, expiry, revocation, and cross-user access.
What it explores
The useful part is the evidence: run vulnerable and hardened fixtures, inspect the difference, and export the results.
◉ ─ ◉
│ │
◉ ─ ◉PRIVACY & NETWORKING
DIMY
A distributed, privacy-preserving contact tracing protocol built in Python.
Inside the project +
How it works
UDP broadcasts, TCP client–server communication, and Bloom filters support scalable risk analysis.
What it explores
A practical exploration of distributed communication and compact representations of contact data.
BadUSB
A controlled testing environment for investigating endpoint security risks.
Inside the project +
How it works
Custom payloads simulate attacks to assess credential exposure and endpoint behavior in a testing environment.
What it explores
Findings and observed risks are documented in a report, connecting the experiment to actionable security analysis.