1umberhack@dc34:~$ whoami
Offensive architecture, silicon, wasm toolchains and zero-trust infrastructure.
I build the stack I attack: compilers that put Go and C++ in the browser, the loaders that make them fast, and the trust systems that browsers lean on.
DEF CON 34 · Main Stage 4$ cat talk.md
Fri Aug 7, 2026 · 10:30 PDT · Main Stage 4
EvilRBI turns Remote Browser Isolation against the user it was meant to protect: a pixel-faithful IdP mirror, relayed clicks and keys, and MFA ceremonies completed in the middle browser. Stock Chrome, no 0-days, no extension install. Trust boundaries disregarded, not broken.
$ ls ~/work
silicon
From spec to silicon, for defense and quantum-on-classical. Security-first chip design from the first requirement to tape-out-ready layout, with the open jev-class PDK: five blocks, a Kuramoto oscillator time source among them, through SKY130A signoff.
ingress
From development to global ingress. A QUIC control tunnel and HTTP/3 edge that grows from a client beside your app into load-balanced fleets, product stacks from hub images and multi-region anycast, with automatic ACME and meshTLS. MIT licensed.
browser research
Chromium's browser-to-renderer trust surfaces rebuilt as go++ wasm guests: LocalFrame script execution, DevTools session trust, chrome.* and extension bindings, and which deputies a frame can commit. VoodooCompile's voodoomc reads .voodoom or Chromium .mojom and writes the C++ proxy and stub headers they speak.
platform
A zero-trust platform: identity provider and control plane, with Drive, GitMesh, MeshMail, TodoTraq, MotionKB and chat running as TunnelTug barges, and device-bound sessions (W3C DBSC) at the edge.
toolchain
A Go-to-C++-to-wasm compiler with its own libc, libc++ and sysroot. WASMGocOS is the virtualization layer under it; WASMReactOS runs on the same base. Programs link only the subsystems they import.
runtime
fastloader streams, caches and prewarms wasm so it never loads slow. RocketGui is a go++ RmlUi guest that records each frame for a WebGPU host, with WebGL2 drawing until WebGPU is ready. This page is rendered with it.
product
A news reader with no noise: one curated feed from 41 sources, no accounts, no comments. Server-rendered and small enough for a commuter's phone signal.
$ cat contact