Freelance · available for contract

Close tothe metal.

Independent systems developer. Networking, engine internals, backends, and the security work that goes with all three. Nine years of it, starting at fourteen.

Start a conversation

The through-line is verification. Signed releases, build identities that refuse a mismatch instead of hoping, and update paths that fail closed rather than guess.

Work

Neither of these products is mine. The work in them is. That is what contract work looks like, and it is most of what I do.

The Z Connect

thezconnect.com

A student network built around a single card: campus discounts, mentorship and opportunities in one membership, with the partner and branch tooling behind it.

I develop and maintain it for the people who own it. Next.js and Node on the front, Prisma over Postgres underneath.

GeneralsX

wh1ter0se.dev/generals

A cross-platform port of Command & Conquer: Generals Zero Hour. The game and the engine are not mine. EA released the source under GPL v3, and a chain of community forks did the foundational work long before I touched it.

We took fbraz3/GeneralsX as the base and built on top of it: getting it building on the Mac, then getting Windows, macOS and Linux into the same match. An iPadOS build runs here but is not published. Twelve players is next.

Download GeneralsX

Timeline

  1. Now

    Freelance

    I take contract work: systems, networking, backends, and the security side of all three. The Z Connect is a product I develop for its owners, and GeneralsX is a port I contribute to. Neither one is mine.

  2. Now, side

    Head of cyber security

    I run security at Betarabia, the largest online sportsbook and casino operator in the MENA region. It is a side role, held alongside the freelance work.

  3. Now

    Employed through

    Onlive Support Services

    The sister company that runs everything behind Betarabia, under the same ownership.

  4. Now

    Penetration testing

    The part of the work I am best at is the part I cannot show you. Findings belong to the companies that commissioned them, and a writeup with a recognisable target costs them more than it credits me, so none of it is published. Ask me directly instead.

  5. At 14

    Growtopia

    Where it started, on Growtopia: save.dat builders, mods, proxies and internals, and I ran Nusumu.wtf. Taking apart a binary someone else shipped, and working out what the client could be made to say to the server, is where everything above came from.

Hire me

Two kinds of work. Say which one, and what the system or the target is. I will tell you if it is a fit before anything else.

Penetration testing Web applications and infrastructure. Scoped, and the findings stay yours; nothing gets published.
Email about a test
Software Systems work: engines, netcode, backends, and the build and release tooling around them.
Email about a build