I'm Cookie Engineer, and this is me:
🛡️ I'm a Cyber Defense Engineer / Purpleteam Engineer with a specialization in appsec, netsec,
and infosec. I do a lot of binary exploitation CTFs, but I'm still pretty bad at it. Check out my
writeups if you like that sorta thing.
🚀 I'm working on the Tholian Network which aims to create a peer-to-peer self-adapting Cyber Defense Network that infiltrates malware and proactively fights back against APT botnets. It's something in between reproducible Cybersecurity as Code and a symbolic inference preserving AI model that runs embedded in the EDR agents on all machines.
🛠️ Whenever I have the time for it I'm working on gooey and some little apps like git-evac or agenda to find out whether Go is a feasible frontend language when combined with a Unidirectional Reactive MVC architecture.
🤖 I'm currently experimenting a lot with my abliterated self-hosted LLM stack and my own agentic environment called exocomp which focuses on cyber security related work, malware analysis, and counter-malware development. It embraces specification and test-driven development. Projects built with it are usually beyond human knowability.
💉 The first successful project built with it was antimiasma, the first self-spreading counter-worm vaccine. The project itself was a response to the miasma malware campaigns, also the first of its kind because it was developed using ChatGPT Codex and had 17 different mutations within the first two weeks of the campaign.
🤖 Other example projects built with exocomp are poqman, systempanel, goaccess, gobayashi, godecompose. gotestwasm, gows, and gozim.
💻 Previously I did Blueteam/Purpleteam work, by defending network infrastructures and by making large-scale computation systems more secure (e.g. ISO 27001, ISO 27033 or IEC 62443, ISO 21434, ISO 26262, UN Regulations No 155/156 and NIS2).
⚒️ I believe the programming language with the least maintenance burden is Go. You
can write me some hatemail to idontcare [at] cookie.engineer on how Rust is better in every way
while still ignoring that you probably maintain more bindings than actual program codebases.
❤️ My preferred languages are Go, eBPF, and WebASM. But I've done a lot of work in C,
C++, NASM, node.js, RAPID, SPS, JerryScript, V8GL, HTML5, CSS4, WebGL, Python,
Rust, Lua, Nidium and probably other runtimes due to my passion for electronics, robotics, CTFs,
and gamedev jams.
🤖 I love to automate code generation with co-evolutionary backpropagated ES/HyperNEAT, Hypernetworks and Compositional Game Theory based systems to build automated Cyber Defense systems.
😯 I'm a 4chan (/g/, /pol/, /q/, kiwifarms) discreditation target of 2021, so you'll
find lots of lies about me on the Web, including news websites that apparently never verify their sources
before publishing clickbaity stories.
🌈 I believe in Human Rights. The Tholian Network Charter is my attempt of creating guidelines for a cooperative future that embraces the potential of a mutually helping and understanding society.
Live long and prosper. 🖖