[/ˈdiː.məs/]
hola • bonjour • ciao • halo • こんにちは
Interested in computers, mostly in understanding them better than the people who built them. Software, operating systems, networks, hardware, cloud infrastructure, AI/ML, and embedded systems. I tend to get interested in things other people consider finished.
A lot of my time goes into security research. Authentication, session management, identity, DNS, certificates, APIs, cloud services, containers, CI/CD, and supply chains. There's usually a gap between what a system claims to enforce and what it actually enforces. Finding it is the interesting part.
IoT security and botnets are also on the list. Firmware, exposed services, default credentials, and devices running software nobody seems particularly interested in maintaining. Mirai was a fairly straightforward demonstration of what happens when these things are connected to the internet at scale.
Reverse engineering, vulnerability research, malware analysis, exploit development, bug bounties, RCE, zero-days, and CVEs. Most systems are less complicated than they look. Some are worse than they look. Both are worth investigating.
Links
- Suji My LLM-powered chatbot [Open Alpha]
- SERVFAIL Community-run authoritative DNS service
- Seized.fyi Seizure banner archive
Elsewhere
- XMPP: [email protected]
- PGP : Public key
Fingerprint:
BD9A A11B 0B53 F7C1 B22D B9F6 EDDA AB4A 102F B5A0
Listening
Bits & Pieces
A few credentials, contributions, and other artifacts from around the internet.
Forbidden Zone
A collection of places where people discuss things that are probably better left undiscussed.