I like the parts of computing most people abstract away: memory maps, syscall boundaries, linker scripts, and what a binary actually does when you stop trusting it. Most of what I build starts as "wait, can that even work?" — and then it does.
|
Linux 6.11 booting natively on Xtensa — no emulation layer. NOMMU, 16 MB flash / 8 MB PSRAM, working WiFi, and the chip's hardware RSA accelerator wired into the Linux Crypto API. Ships as a single flashable image.
|
Bare-metal sandbox in pure Bash. Namespaces, cgroups v2 and Xephyr composed into a container-less jail for detonating and observing untrusted ELF binaries. No runtime, no daemon, no dependencies.
|
|
Modular diagnostics and audit tooling for defensive review of Windows environments — host telemetry, configuration drift, artifact collection.
|
Firmware experiments, kernel patches and half-finished ideas that occasionally turn into the projects on the left. |
Systems & embedded
Application & web
Infra & data
Analysis & hardening
