About

Who I am

A tinkerer who never outgrew taking things apart to find out how they work.

Twenty-odd years in enterprise IT, most of it spent in the plumbing: identity, directories, messaging. The systems everything else quietly depends on, that nobody thinks about until they break. I spent those years being one of the people who got called when they broke.

Slight ADHD perfectionist, so I’ll chase a loose thread far longer than is reasonable and I genuinely cannot leave something half-understood. It’s a character flaw that occasionally produces a CVE.

Always learning, always moving, usually at an hour that suggests questionable judgement.

What I do

Independent security research into overlooked enterprise infrastructure — the layers that run with high privilege and almost never get audited. Print and scan is where it started, because that is the corner I knew best. Identity, directories and messaging are the same shape.

In practice that means reading the code, rebuilding the thing in a lab, and trying to make it do something it was never meant to do. Then proving it on the wire before saying it out loud. An disclosure here claims what was reproduced and nothing beyond it — where a step is plausible but was never actually executed, it says so.

Why I do it

Because I spent two decades responsible for systems like these, and I know how much rides on them. A print server authenticates people, queries the directory, stores credentials and executes code. It tends to get scoped, patched and watched as though it were a printer.

That gap isn’t anyone’s fault. Nobody audits this layer because nobody quite owns it, and the people best placed to find the problems are the same people keeping it running — which is already a full-time job. I have the luxury of curiosity and a lab, so I go looking.

When something turns up, it follows coordinated disclosure: the vendor gets the finding and the time to fix it, and publication waits for a shipped fix or a date agreed with them. That’s the standard the industry settled on, and it exists for good reasons — it’s also why a disclosure you came here looking for might not be up yet.