profile
Student and independent builder working across web security, computer vision, and focused tools. The work emphasizes reproducible evidence, explicit trust boundaries, accessible interfaces, and systems that remain understandable after deployment.
capabilities
- security researchauthorized web assessment, authorization and tenant-isolation review, responsible disclosure, evidence-driven technical writing
- computer visionobject-detection pipelines, dataset construction, annotation, evaluation, OpenCV, PyTorch, and Ultralytics
- product engineeringTypeScript, JavaScript, Python, C++, Next.js, PWAs, responsive interfaces, browser tooling, and API integration
- delivery and operationsLinux, Docker, Nginx, Cloudflare, GitHub Actions, signed immutable releases, monitoring, and privacy-conscious analytics
selected work
- authorized multi-tenant security reviewdocumented missing authentication, tenant isolation, and object-authorization boundaries across education services while keeping operational targets and real records redacted
- CanvasGLSLpublic CC0 Fabric mod with an in-game GLSL editor, live compilation, Shadertoy-compatible uniforms, syntax highlighting, and file management
- OpenMUinstallable student companion that brings digital ID, classes, timetable, transcript, events, alerts, and campus services into one interface
- BTS Trackerreal-time Bangkok transit PWA combining arrival countdowns, journey planning, fares, station maps, and accessibility details
- corn-kernel grading pipelinetwo-layer YOLOv11 and deterministic grading pipeline with per-kernel evidence, custom data annotation, post-processing, and candid model evaluation
tools
TypeScriptJavaScriptPythonC++Next.jsReactBunOpenCVPyTorchUltralyticsBurp SuiteWiresharkDockerNginxCloudflareGitHub Actions