Khashayar Fereidani
I'm a security researcher and software engineer working with Rust, Go, C, and JavaScript. I report vulnerabilities to help secure projects, and build highly-optimized software and tools for the problems I run into. The ones I enjoy most resist a quick answer and reward deep thinking and patient brainstorming. Beyond code, I write about philosophy, technology, and the ideas that shape how we build and think.
Latest Posts
View all →Latest Vulnerabilities
View all →- reportharness Gitspace hardcoded password for every user account2026-09-24
- reportnps cleartext secrets, unsalted MD5 tunnel keys, and timing-unsafe compares2026-09-24
- reportdive tar-slip in image file extraction2026-09-24
- reportharness registry webhook sort_order blind SQL injection2026-09-24
- reportvnt VPN defaults to skipping TLS certificate verification2026-09-23
Open Source Projects
View all →rust channel benchmarks to keep stat of performance of Kanal library in comparison with other competitors.
High-performance, lock-free local and concurrent object memory pool with automated allocation, cleanup, and verification.
A stack-based memory allocator with optional fallback to a global/secondary allocator.
Compare musl and glibc using repeatable compile + benchmark runs driven by Zig's C compiler frontend.