I'm Cookie Engineer, and this is me:
π‘οΈ I'm a Cyber Defense Engineer / Purpleteam Engineer with a specialization in appsec, netsec, and infosec.
I do a lot of binary exploitation CTFs, but I'm still pretty bad at it. Check out my writeups
if you like that sorta thing.
π I'm working on the Tholian Network which aims to create a peer-to-peer self-adapting Cyber Defense Network that infiltrates malware and proactively fights back against APT botnets. It's something in between reproducible Cybersecurity as Code and a peer-to-peer symbolic inference preserving AI model that runs embedded in the EDR agents on all machines.
π οΈ Whenever I have the time for it I'm working on gooey and some little apps like git-evac or agenda to find out whether Go is a feasible frontend language when combined with a Reactive MVC architecture.
π€ I'm currently experimenting a lot with my abliterated self-hosted LLM stack and my own agentic environment called exocomp which focuses on cyber security related work, malware analysis, and counter-malware development. Projects built with it are usually beyond human knowability. The first successful project built with it was antimiasma, the first self-spreading counter-worm vaccine. The project was a response to the miasma malware, also the first of its kind because it was developed using ChatGPT Codex and had 17 different mutations within two weeks of the ongoing malware campaign.
π€ Other example projects built with exocomp are poqman, gotestwasm, goaccess, gobayashi, godecompose. Here be dragons, expect them breaking at any time.
π» Previously I did Blueteam/Purpleteam work, by defending network infrastructures and by making large-scale computation systems more secure (e.g. ISO 27001, ISO 27033 or IEC 62443, ISO 21434, ISO 26262, UN Regulations No 155/156 and NIS2).
βοΈ Currently, so I believe, the programming language with the least maintenance burden is Go. You
can write me some hatemail to idontcare [at] cookie.engineer on how Rust is better in every way while still ignoring
that you probably maintain more bindings than actual program codebases.
β€οΈ My preferred languages are Go, eBPF, and WebASM. But I've done a lot of work in C, C++, NASM,
node.js, RAPID, SPS, JerryScript, V8GL, HTML5, CSS4, WebGL, Python, Rust, Lua, Nidium and
probably other runtimes due to my passion for electronics, robotics, CTFs, and game jams.
π€ I love to automate code generation with co-evolutionary backpropagated ES/HyperNEAT, Hypernetworks and Compositional Game Theory based systems to build automated Cyber Defense systems.
π― I'm a 4chan (/g/, /pol/, /q/, kiwifarms) discreditation target of 2021, so you'll find lots
of lies about me on the Web, including news websites that apparently never verify their sources before publishing
clickbaity stories.
π I believe in Human Rights. The Tholian Network Charter is my attempt of creating guidelines for a cooperative future that embraces the potential of a mutually helping and understanding society.
Live long and prosper. π


