- Embedded and hardware security (bootloaders, authenticators, constrained devices)
- Red teaming, LLM jailbreaking, and AI security research
- Agent tooling and computer-use agents
- ML training, distillation, and efficiency
- Multi-device audio systems
spacebunny WebGPU three.js site · fifty offline graphics demos |
neon plankton demo 73k GPU particles · curl-noise advection · WebGL2 |
nextdrop Zero-storage LAN file transfer over authenticated Socket.IO |
Quintet Director Multi-device computational mic array · source private |
Storo E2E encrypted personal cloud · PWA / desktop / mobile |
hardwarekeyemulator Lab CTAP2 / FIDO2 software authenticator · selftests green |
Infinity Verified install · checksums · CLI help |
Infinite Cross-platform MCP bridge for browser AI hosts |
| Project | What it is |
|---|---|
| hardwarekeyemulator | Lab CTAP2 / FIDO2 software authenticator with CTAPHID, Linux UHID transport, and a local WebAuthn RP |
| hardwarekeyemulator-audit | Security audit of the emulator: critical UV forge, AAGUID defect, remediations, and a differential that proves closures |
| the-byte-of-87 | Secure embedded design challenge (MITRE eCTF style): ChaCha20-Poly1305 + Ed25519 bootloader and update path on Tiva |
| spacebunny | WebGPU three.js site plus fifty offline self-contained graphics / simulation demos |
| nextdrop | Zero-storage LAN file transfer portal over authenticated Socket.IO; files relay in memory only |
| infinity-codex-releases | Verified Infinity binaries, installers, checksums, and offline USB bundles |
Two-pass update: Ed25519 over the header and ciphertext first, then ChaCha20-Poly1305 decrypt and tag check. Commit magic is BOOT_MAGIC ^ diff so a failed check cannot produce a bootable record. A monotone min_ver ratchet on its own flash page blocks rollback. Boot itself is crypto-free; the magic is the proof.
flowchart TD
A[Power on / reset] --> B[lock_debug + lock_sram_xn]
B --> C[recover_firmware from backup if needed]
C --> D[sync_floor: raise min_ver ratchet]
D --> E{Command}
E -->|BOOT| F[boot_firmware: magic + size checks only]
F --> G[Jump to firmware]
E -->|UPDATE| H[Pass 1: parse 98B header]
H --> I[Reject if ver below floor]
I --> J[Stream Ed25519 verify + stage ciphertext]
J --> K{Signature OK?}
K -->|no| L[Reject · keep old image]
K -->|yes| M[Pass 2: derive fw_key · decrypt pages]
M --> N{Poly1305 tag OK?}
N -->|no| L
N -->|yes| O[Backup active FW + record]
O --> P[Install decrypted image · write magic last]
P --> Q[sync_floor · erase backup]
Q --> E
Source private; demos available on request.
Quintet · multi-device computational mic array
Phones, laptops, and tablets as coordinated capture nodes with AI-driven placement and mixing (TypeScript / Rust / Swift). Director control surface, local coordinator, signed native pairing, and provenance-backed processing graphs.
flowchart LR
D[Director web UI] -->|loopback API| C[Coordinator]
C -->|signed pair / control| N1[Phone node]
C --> N2[Laptop node]
C --> N3[Tablet node]
N1 -->|local master WAV| C
N2 --> C
N3 --> C
C --> P[Clock fit · resample · mix]
P --> V[Content-addressed vault]
V --> X[Authentic / Natural / Enhanced exports]
source private; demos on request
Infinity · MCP computer-use agent
MCP computer-use agent across files, shell, browser, and desktop. Verified binaries, installers, and USB bundles at infinity-codex-releases.
flowchart LR
H[ChatGPT / Claude / host] -->|MCP HTTPS/WSS| G[Infinity gateway]
G --> A[Agent runtime]
A --> F[Files · patch · search]
A --> S[Shell · PTY]
A --> B[Browser / CDP]
A --> U[Desktop observe / input]
A --> M[Memory · projects · plugins]
source private; demos on request
Storo · encrypted personal cloud
End-to-end encrypted personal cloud storage with PWA, desktop, and mobile clients. Chunked uploads, resumable queue, previews, sharing, and vault health.
flowchart TB
C[Browser / PWA / desktop / mobile] -->|password-derived keys| E[AES-GCM in client]
E -->|chunked blobs| W[Private storage webhook]
C -->|account session| A[Account API]
A --> D[(Vault metadata / shares)]
C --> P[Previews · studio · recorder]
C --> H[Vault health · dedupe · trash]
source private; demos on request
Infinite · MCP bridge desktop app
Cross-platform MCP bridge desktop app: a local permission boundary for browser AI hosts (files, shell, desktop, and companion extension).
flowchart LR
AI[Browser AI host] -->|Secure MCP tunnel| T[Local Infinite app]
T --> P[Permission gates]
P --> F[Approved folder roots]
P --> SH[Shell when enabled]
P --> DT[Desktop tools]
X[Companion extension] --> T
source private; demos on request