I discovered and responsibly disclosed CVE-2026-51585, a critical vulnerability in the Realtek PCIe GbE Windows driver that enabled arbitrary physical memory access. I documented the security-guard bypass and reverse-engineering methodology, and built a reproducible C++23 proof of concept.
At Socl.gg, I implemented a production OAuth2 flow in Go for GitHub, Discord, and Google, with provider-agnostic session management. I also built a real-time profile editor in Next.js and TypeScript with optimistic updates and server-side conflict resolution.
On Kythi, my Rust file-upload service project, I built an asynchronous pipeline serving roughly 800 users and implemented content-addressed deduplication. I also migrated storage to asynchronous batch commits without data loss or downtime.
