A smart lamp, rescued.
When its maker shut down the app and cloud service, the lamp stopped responding. I reverse-engineered the Android app and brought back local Wi-Fi control.
Android app analysis / Device protocols / No cloud dependency
Application security / Reverse engineering
Security,
taken apart.
I’m Ernest. I like figuring out how systems work, where they break, and how to make them better.
01Selected work
Curiosity → investigation → something that works.Finding the unexpected.
Finding bugs in open-source libraries and reporting them privately to maintainers. Write-ups will appear here after fixes ship.
Open-source vulnerability research / Responsible disclosure
02Where I dig in
Application security & threat analysis
Threat analysis, threat modelling, security testing and penetration testing. Understanding attack paths, assessing risks and asking how a system would really be attacked.
Reverse engineering
Android apps, firmware and the network protocols that old devices speak. Understanding what’s underneath.
DevSecOps
Security built into software delivery: CI/CD, container hardening, automated scanning and security tests on every build.
Automotive systems
CAN bus analysis, vehicle diagnostics and coding with VAG-COM. Exploring how vehicle systems communicate and how their features are configured.
03Curious by default.
By day I work on the pipelines that ship software, making sure security checks run every time code goes out. The rest of the time I take things apart: apps, firmware, smart-home gear, and occasionally my car.
I’m working toward more hands-on security research. I also explore NFC and RFID, and tools that speed up security work while a person still makes the call.
Away from the keyboard
Night skies and wildlife through a camera. Hiking, kayaking and paddleboarding. Pottery, watercolour and cooking something new.
Tennis, martial arts and travelling. Slowly learning Japanese, with a little Mandarin on the side.
Get in touch
Let’s compare notes.
Email is the best way to reach me.