Operational surface / 01
Designing infrastructure that scales, and defenses that hold.
Backend infrastructure, distributed systems design, and API reverse-engineering for data acquisition.
Scroll to project indexCore disciplines
Where the work concentrates
Infrastructure
Designing for scale and uptime — capacity planning, cache behavior, operational visibility, and predictable failure modes.
Bot Detection & Evasion
Building detection systems — fingerprinting, behavioral signals, challenge design — and the techniques that defeat them. Understanding both sides of the adversarial loop.
Data Acquisition
Reverse-engineering APIs for data extraction — traffic inspection, auth/session replication, and resilient client behavior under adversarial constraints. No browser automation.
JS Reverse Engineering
Deobfuscating and analyzing JavaScript VMs, control-flow obfuscation, and anti-tamper protections to understand how client-side logic actually works.
Project index
Selected systems
Video CDN
Tiered storage hierarchy (HDD → NVMe → edge) for video delivery, tuned for cache locality and origin protection.
CDN DRM
WASM-based playback protection with embedded client fingerprinting — obfuscating key handling from tampering while detecting anomalous, restream-pattern client behavior.
Public Data Acquisition
Large-scale retrieval of public data, including circumventing automated verification layers designed to block programmatic access.
Distributed Infrastructure
Containerized services orchestrated with Kubernetes and Docker, deployed through CI/CD pipelines.
Philosophies
How the work gets done
- PHIL-01
Kernel-level over userspace hacks, when the kernel already solves it
- PHIL-02
Reverse-engineer before reinventing
- PHIL-03
Cache aggressively, but know exactly why something is hot
- PHIL-04
Detection and evasion are the same problem, viewed from opposite sides
- PHIL-05
The simplest system that survives production is the right one