I'm Cookie Engineer, and this is me:

🛡️ I'm a Cyber Defense Engineer / Purpleteam Engineer with a specialization in appsec, netsec, and infosec. I do a lot of binary exploitation CTFs, but I'm still pretty bad at it. Check out my writeups if you like that sorta thing.

🚀 I'm working on the Tholian Network which aims to create a peer-to-peer self-adapting Cyber Defense Network that infiltrates malware and proactively fights back against APT botnets. It's something in between reproducible Cybersecurity as Code and a symbolic inference preserving AI model that runs embedded in the EDR agents on all machines.

📖 My current effort focuses on archiving the remaining knowledge of the internet, and to preserve it for future generations. Part of this decentralization effort is gonano, gozim, and zimdex.

🛠️ Whenever I have the time for it I'm working on a pure Go toolchain for building software more efficiently. This includes my agentic environment exocomp, my WebASM and UI framework gooey, and some smaller example apps like git-evac or agenda. The goal is to find out whether Go is a feasible frontend language when combined with a Unidirectional and Reactive MVC architecture.

💉 The first successful project built with the exocomp environment was antimiasma, the first self-spreading counter-worm vaccine. The vaccine itself was a response to the miasma malware campaigns, which was developed using ChatGPT Codex and had 17 different mutations while the campaign was still ongoing in the first two weeks.

🤖 Other example projects built with exocomp are hydra, pacman-backup, systemintegrity, systempanel, goaccess, gobayashi, gotestwasm, gows.

🚧 Unstable projects built with exocomp are godecompose and poqman. They still need some more care for a the typically required refactor after an agentic environment was used to build a prototype.

💻 Previously I did Blueteam/Purpleteam work, by defending network infrastructures and by making large-scale computation systems more secure (e.g. ISO 27001, ISO 27033 or IEC 62443, ISO 21434, ISO 26262, UN Regulations No 155/156 and NIS2).

⚒️ I believe the programming language with the least maintenance burden is Go. You can write me some hatemail to idontcare [at] cookie.engineer on how Rust is better in every way while still ignoring that you probably maintain more bindings than actual program codebases.

❤️ My preferred languages are Go, eBPF, and WebASM. But I've done a lot of work in C, C++, NASM, node.js, RAPID, SPS, JerryScript, HTML5, CSS4, WebGL, Python, Rust, Lua, Nidium and probably other runtimes due to my passion for electronics, robotics, CTFs, and gamedev jams.

🤖 I love to automate code generation with co-evolutionary backpropagated ES/HyperNEAT, Hypernetworks and Compositional Game Theory based systems to build automated Cyber Defense systems.

😯 I'm a 4chan (/g/, /pol/, /q/, kiwifarms) discreditation target of 2021, so you'll find lots of lies about me on the Web, including news websites that apparently never verify their sources before publishing clickbaity stories.

🌈 I believe in Human Rights. The Tholian Network Charter is my attempt of creating guidelines for a cooperative future that embraces the potential of a mutually helping and understanding society.

Live long and prosper. 🖖