projects
Software I built and run. Each page covers the problem, my part, the main design decisions, and how I checked that it works.
featured
Job Monitor
Tracks new-grad jobs from 106 career feeds every 15 minutes. Live dashboard, Discord alerts, on-demand LinkedIn search.
Coding Tracker
Spaced-repetition app for interview prep, live on AWS with GitHub sign-in and a public demo. React, FastAPI, Postgres, 260+ tests.
PermScope
Found 183 mini-program APIs in WeChat, QQ, Alipay and Baidu that skip permission checks. Published at USENIX Security '26.
research
Scopes in Super Apps
Analyzed 3,151 mini-program APIs in WeChat, Douyin and Alipay. Over 90% fall outside Android's permission model. First-author paper at ACM SaTS '26.
course
Code Review Hotspots
Tested whether a pull request's topic predicts which of its files reviewers comment on, over 33,596 PRs written by AI coding agents. I built the data collection and the evaluation.
hackathon
CodeMind
Hack the North 2025: our team built CodeMind, a local-first tool that turns AI coding sessions into a searchable timeline. A custom Model Context Protocol (MCP) server collects sessions from Cursor and Claude, and an OpenAI model extracts the key details and indexes them.
security
LoRaWAN Fuzzer
A fuzzer that sends uplinks with mutated payloads from a simulated LoRaWAN device to a ChirpStack network server and records whether a valid downlink comes back.