Khashayar Fereidani
I'm a security researcher and software engineer working with Rust, Go, C, and JavaScript. I report vulnerabilities to help projects security, and build highly-optimized software and tools for the problems I run into. Beyond code, I write about philosophy, technology, and the ideas that shape how we build and think.
Recent Activity
View all →- blogUnbounded Channels Are Mostly a Mistake2026-07-19
- reportPHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow2026-06-18
- reportPHP 8.5.7 `levenshtein()` signed-integer overflow2026-06-18
- reportPHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow2026-06-18
- reportPHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read2026-06-18
- blogZig: A Good Language Drowning in Bad Decisions2026-05-18
- blogFrashokereti in the Age of AI2026-05-11
- blogOptimization First Rule: Don't, but aim for it2026-05-06
- reportJoomla 1.5.x to 3.4.5 Object Injection Exploit2015-12-31
- blogHow to use Google reCAPTCHA in Node.js and Express Framework2015-08-16
- blog2 Bounties from Yahoo!2014-08-20
- reportKerio Control <= 8.3.1 Boolean-based Blind SQL Injection2014-07-01
Open Source Projects
View all →rust channel benchmarks to keep stat of performance of Kanal library in comparison with other competitors.
High-performance, lock-free local and concurrent object memory pool with automated allocation, cleanup, and verification.
A stack-based memory allocator with optional fallback to a global/secondary allocator.
An efficient hybrid wait queue futex designed for high-contention scenarios, supporting both synchronous and asynchronous waiting and notification. It supports notify and notify_many on all targets.