Portfolio

Whitepapers

• Assessing Unikernel Security, Apr 2 2019.
• Inducing data loss in Zigbee networks via join/association handshake spoofing, IEEE Conference on Communications and Network Security, 2016.

Talks

• Xen API Archaeology: Creating a Full-Featured VMI Debugger for the Xen Hypervisor, Xen Project Developer and Design Summit 2019, Jul 10, 2019. Slides here.
• Unikernel Apocalypse: Big Trouble in Ring 0, ToorCon XX, Setp 2018. Slides here.

Tools & Libraries

• xendbg, a feature-complete reference implementation of a modern Xen VMI debugger.
• locdown, a CLI tool to fetch audio/metadata from the Library of Congress Jukebox.
• menubar-toggle, a CLI tool to toggle the MacOS menubar autohide behavior.

Articles

• Assessing Unikernel Security, NCC blog, Apr 2, 2019. Chinese version here.
• Xendbg: A Full-Featured Debugger for the Xen Hypervisor, NCC blog, Jan 26, 2019.

Technical Advisories

• Vistara OpsRamp Agent Leaks NTLM Hashes, NCC blog, Oct 22, 2019.
• Multiple Vulnerabilities in MirageOS, NCC blog, Oct 4, 2019.

Open-Source Contributions

• systemd, a service manager: Unique identifiers for EFISTUB entries, which enables automated selection of default and oneshot boot entries.
• Sway, an i3-compatible Wayland compositor: the scroll speed configuration option.
• Cataclysm: Dark Days Ahead, an open-world zombie apocalypse roguelike: NPC mutation system, overdose symptoms, monster item stealing behavior, various bugfixes.