I Was Targeted by a DPRK-Linked Supply Chain Attack via LinkedIn. Here's Exactly How It Worked.
How I caught and documented a sophisticated nation-state supply chain attack targeting developers through LinkedIn.
Cards with have an interactive demo — flip to try.
Original strategy games — designed, simulated, and published under ShaRNA UG (haftungsbeschränkt).
Four clans churn the Ocean of Milk in a race to 10 Glory.
Asymmetric strategy set in the Hindu myth of the Churning of the Ocean. Move your beings across a hex board through Day and Night phases, harvest divine resources, and chase Glory through Tribute, Valour, or the climactic Great Churning. Playable in the browser — online multiplayer with room codes, local hotseat, or vs AI. Built on a deterministic TypeScript engine with an authoritative WebSocket server and an AlphaZero-style bot training stack. A print-ready physical edition is headed for SPIEL Essen 2026.
Everything useful you own is useful only until you make it permanent.
Last Universal Common Ancestor — an evolution board game of worker placement and engine building. Draft genes onto your cell for live abilities, then fix them into your genome to score points — killing the ability forever. Asymmetric lineages, shifting environment cards across three eras, and a promoter-key chain that rewards planning. Balanced over ~100,000 simulated games with reinforcement-learning agents; a complete print-and-play kit and digital playtest table exist today.
How I caught and documented a sophisticated nation-state supply chain attack targeting developers through LinkedIn.
Multi-agent coordination protocol where autonomous agents self-organize into delivery swarms and settle payments on-chain.
Orca: filling the gap between Coolify and Kubernetes. Rust-native, GPU-aware, AI ops baked in.
The architecture choices behind a self-hosted restaurant OS that replaces expensive SaaS POS systems.
KitchenAsty: online ordering, reservations, and kitchen ops in one self-hosted admin panel.
Breakpilot GmbH · Germany
Building self-hosted, GDPR-compliant B2B software for regulated companies — CERTifAI (GenAI infrastructure dashboard) and autonomous compliance automation. Owning product engineering, platform architecture, and sovereign EU infrastructure end to end.
ShaRNA UG (haftungsbeschränkt) · Germany
Indie game studio publishing original strategy games — Samudra Manthana (live online multiplayer) and L.U.C.A. (evolution-themed board game) — across digital and tabletop, on self-hosted infrastructure.
ETO GRUPPE TECHNOLOGIES GmbH · Stockach, Germany
Led a team of 10 developers across IoT, embedded, and web platforms. Technical due diligence for M&A, patent management, GDPR/MiCA/DORA/AML compliance, and driving architectural modernisation across product lines.
ETO GRUPPE TECHNOLOGIES GmbH · Stockach, Germany
Managed cross-functional teams, sprint planning, and capacity planning for grant projects. Led etopay-sdk — multi-platform Rust payment SDK with WASM, mobile, and native FFI bindings — from design to production.
ETO GRUPPE TECHNOLOGIES GmbH · Stockach, Germany
Built embedded Linux services, gRPC microservices, and cryptographic tooling (MPC, SSS, Threshold Crypto, DID/VC). Managed IoT fleet PKI using PKCS#11 with NitroKey and cloud HSM.
SysDesign GmbH · Kressbronn am Bodensee, Germany
Embedded firmware development for industrial and automotive-grade systems. Built Li-Ion battery management systems, lift and motion controllers, and SmartConnect gateway firmware. Developed a proprietary Single Wire Bus protocol, designed OS abstraction layer (OSAL) concept, and conducted EMC measurements for motor control hardware.
Larsen & Toubro Limited · Mumbai, India
Embedded software development for industrial automation and control systems.
Filed as inventor · ETO GRUPPE TECHNOLOGIES GmbH
Datenbereitstellungsverfahren, Sensornetzwerk und Sensor
Trustworthy data provisioning for connected devices — foundational for agent telemetry
Content-Management-Prozess, Content-Management-System, Metaverse und Computerprogrammprodukt
Decentralised content coordination in virtual environments
Verifizierungsverfahren und Verifizierungscomputersystem mit einem NFT-Erzeugungsgerät
On-chain verifiable attestations for physical objects
Kryptografisches Verfahren und durch das kryptografische Verfahren gesicherte verwahrte oder nicht verwahrte Geldbörse
Wallet security primitives applicable to agent custody infrastructure
Verfahren und System fĂĽr den Waren- und/oder Posttransport
⊛ The SwarmHaul protocol — patented three years before the hackathon
Three AI-generated ambient music channels, each engineered for a different headspace. Auto-selects based on your local time of day.
Orchestral drama & dark ambient for writers, filmmakers, and storytellers.
Cinematic BGMGritty house, techno & deep beats engineered for deep work and focus.
Functional House MusicSecurity is practice, not a badge. Here's what I actively maintain.
Why does a closed TCP socket stay in TIME_WAIT for 2Ă—MSL? What happens if you set SO_REUSEADDR?