All projects
Security, machine learning, and real-time systems — the fuller list. A few have their own write-ups; the rest link to the code.
No Badge Actors
A hardware security key for payments, built on DEF CON badges. It checks who you're paying, that they're standing in front of you, and what you're actually signing, before a button press releases the signature.
Read the write-upMQTT tenant isolation
Demonstrated cross-tenant message disclosure on a multi-tenant MQTT broker with authentication but no authorization, then contained it with a default-deny Mosquitto ACL — the same attack, recorded before and after.
Read the write-upMetadata Mirage
Chained a web-app SSRF into AWS instance-credential theft and a single-API-call privilege escalation to administrator, then severed the whole chain with one instance-metadata flag — enforcing IMDSv2. Reproducible end to end with Terraform.
Read the write-upMRacing dashboard
Reverse-engineered a Python driver dashboard and rebuilt it in C++, pulling live telemetry off the vehicle CAN bus for a Formula SAE team.
dashcam-perception
Fine-tuned YOLOv8 on BDD100K so a dashcam model could detect the classes COCO never covers, and built the evaluation framework to prove it worked.
Read the write-upPUSHbulance
Led a team of five building an autonomous robot that navigated multiple track layouts using OpenCV and real-time control off an ESP32 camera feed.