Selected Work

A short, organized index - not an archive dump.

Three categories of active work, ordered by what I actually spend time on. Older technical writeups are preserved in the Archive.

Security Research

Applied security research, vulnerabilities, and short technical writeups.

1 entry

2020

Finding CVE-2020-1321: Fuzzing Office's 3D Model Parser

Vulnerability research - CVE-2020-1321 · Public / Patched

A grammar-driven .glb fuzzing campaign found a memory-corruption bug in the shared 3D parser used by Microsoft Word and the Microsoft 3D Viewer. Reported to MSRC in January 2020; patched on June 9, 2020 as the Microsoft Office Remote Code Execution Vulnerability (CWE-119, CVSS 7.8, Exploitation Less Likely).

Read the writeup

Systems Design

Git fixes, fuzzing, security architecture, and other things I built.

0 entries

Nothing published in this category yet.

Startups

SNDBOX, OmniBoard, and the founder/product work that came with them.

2 entries

2024

OmniBoard

Founder · boardgames console

TBD - full writeup coming soon. Founded OmniBoard, a boardgames console concept.

Read

2017-2021

SNDBOX

Co-founder · malware analysis · Acquired

TBD - full writeup coming soon. Co-founded SNDBOX, an automated malware analysis platform.

Read