From 0d459409ce3310da4c508a73b65d34f7da88b1bb Mon Sep 17 00:00:00 2001 From: OpenCode Worker Date: Mon, 6 Jul 2026 17:45:43 -0500 Subject: [PATCH] projects: add exalock (WIP) and browser-sec PoC, reframe SSH server as hardening PoC --- resume.tex | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/resume.tex b/resume.tex index 7ca738e..772a94c 100644 --- a/resume.tex +++ b/resume.tex @@ -136,20 +136,24 @@ \section{Projects} \resumeSubHeadingListStartBullets - \resumeSubItem{Real-Time Quantitative Analysis Streamer} -{Independently engineered a high-frequency financial data ingestion and analysis platform for a family quant team, sustaining \textbf{100K datapoints/s} via Kafka, Mosquitto MQTT, and DXLink streaming. Integrated Tastytrade APIs and Paho clients with a ClickHouse backend for low-latency tick storage and real-time analytics. Developed C++-based computational modules executing LSTM-driven predictive models alongside live Heston and Black–Scholes pricing for SPX, NDX, and derivative instruments. Built a Grafana observability dashboard for latency, spread, and volatility metrics, enabling continuous AI-enhanced market insight and fully automated pipeline reliability—driving a \textbf{60\% portfolio profit in Q1 2025}.} + \resumeSubItem{exalock --- GPU-First Wayland Lockscreen \normalfont(WIP, \href{https://git.cyber.ayyalasomayajula.net/marsultor/exalock}{source})} + {Building a from-scratch, zero-toolkit lockscreen for Hyprland/Wayland in C/C++23 and GLSL, speaking raw Wayland protocols (\texttt{ext-session-lock-v1}) with per-output lock surfaces, EGL contexts, and a frame-callback-driven OpenGL ES render loop. Engineered a GPU ``silk'' particle simulation from first principles: divergence-free stream-function velocity fields integrated with RK4 and vorticity-based color mapping. PAM authentication and hardening are in active development.} + \resumeSubItem{Real-Time Quantitative Analysis Streamer \normalfont(closed source)} +{Independently engineered a high-frequency financial data ingestion and analysis platform for a family quant team, sustaining \textbf{100K datapoints/s} via Kafka, Mosquitto MQTT, and DXLink streaming. Integrated Tastytrade APIs and Paho clients with a ClickHouse backend for low-latency tick storage and real-time analytics. Developed C++ computational modules executing LSTM-driven predictive models alongside live Heston and Black--Scholes pricing for SPX, NDX, and derivative instruments, with Grafana dashboards for latency, spread, and volatility observability.} \resumeSubItem{MQTT-to-Push Notification Pipeline \normalfont(\href{https://git.cyber.ayyalasomayajula.net/marsultor/push-notification-mqtt}{C++} $\cdot$ \href{https://git.cyber.ayyalasomayajula.net/marsultor/push-notification-mqtt-rust}{Rust} $\cdot$ \href{https://git.cyber.ayyalasomayajula.net/marsultor/news-feed-notifications}{RSS})} {Architected a three-service notification backbone ingesting MQTT5 messages and delivering mobile push via \texttt{ntfy.sh}. Benchmarked head-to-head C++ (Paho) and Rust (rumqttc/tokio) consumers, with the async Rust rewrite sustaining \textbf{10M notifications/s} at 1KB payloads and adding tap-to-open link actions. Built the Python RSS producer with MD5-hash deduplication and QoS-1 MQTT publishing; the pipeline has relayed \textbf{10k+} real-time news alerts to devices since August 2025.} - \resumeSubItem{Matrix FS} - {Developed a Layer 2 distributed storage protocol atop IPFS, implemented in Rust with a performant Tauri-based Svelte frontend. Engineered end-to-end encrypted file sharing using AES-256-CBC and ChaCha20-Poly1305 AEAD schemes with deterministic tokenization for content addressing. Extended IPFS functionality with MIME type encoding to enable file-type-aware decentralized storage and retrieval. Integrated SurrealDB ticketing over Tor hidden services to facilitate privacy-preserving access control and auditability.} + \resumeSubItem{Matrix FS \normalfont(closed source)} + {Developed a Layer 2 distributed storage protocol atop IPFS in Rust with a Tauri/Svelte frontend. Engineered end-to-end encrypted file sharing with AES-256-CBC and ChaCha20-Poly1305 AEAD, deterministic content-addressing tokens, MIME-aware retrieval, and SurrealDB ticketing over Tor hidden services for privacy-preserving access control and auditability.} \resumeSubItem{Home Infrastructure and OSS Deployment} - {Designed, implemented, and maintain a scalable, enterprise-grade self-hosted infrastructure supporting ~50 concurrent users with partial monetization. The system architecture includes three high-availability servers orchestrating over 40 Docker containers leveraging microservices for mail servers (Postfix, Dovecot), LangChain and LangFlow NLP automation workflows, n8n event-driven automation, multicast RTP streaming clusters, WireGuard VPN mesh networking, and multiple static/dynamic web services. Contributed upstream patches and custom modules to OSS projects, while developing bespoke tooling for advanced network routing, storage management ($\ge$ 150 TB NAS with ZFS), container orchestration, and secure access gateways following zero-trust principles.} + {Designed, implemented, and maintain self-hosted infrastructure supporting ~50 concurrent users with partial monetization. Operate three high-availability servers and 40+ Docker containers across mail (Postfix/Dovecot), LangChain/LangFlow NLP workflows, n8n automation, RTP streaming, WireGuard mesh networking, and static/dynamic web services. Built custom tooling for routing, 150TB ZFS-backed NAS storage, container orchestration, and zero-trust secure access gateways.} \resumeSubItem{CyberPatriot Automation Scripts for USAF} - {Developed a comprehensive suite of proprietary automation scripts in Rust and PowerShell to optimize vulnerability scanning and exploitation tasks for USAF CyberPatriot teams. The Unix-based scripts consistently contributed over 30 points per competition round by rapidly identifying and mitigating security flaws on Linux/Unix targets with sub-2-minute execution times. Windows counterparts, built in PowerShell, achieved over 25 points regularly. The toolkit was later licensed and transferred to another CyberPatriot team for ongoing development and competitive use.} -\resumeSubItem{SSH-Driven Portfolio Site} - {Deployed a web-accessible terminal prompt at \href{https://krishna.ayyalasomayajula.net}{krishna.ayyalasomayajula.net}, inviting users to connect via \texttt{ssh krishna@krishna.ayyalasomayajula.net} for a fully interactive TUI showcase. Designed with Next.js and Tailwind CSS, featuring Aceternity-inspired cursor effects and a cinematic blur aesthetic. The SSH endpoint launches a native C++ FTXUI interface highlighting projects, real-time system status, and personalized Easter eggs, emphasizing a hacker-first, command-line-native identity.} + {Developed a comprehensive suite of proprietary automation scripts in Rust and PowerShell for vulnerability remediation/hardening automation for USAF CyberPatriot teams. The Unix-based scripts consistently contributed over 30 points per competition round by rapidly identifying and mitigating security flaws on Linux/Unix targets with sub-2-minute execution times. Windows counterparts, built in PowerShell, achieved over 25 points regularly. The toolkit was later licensed and transferred to another CyberPatriot team for ongoing development and competitive use.} + \resumeSubItem{Browser-Security Red-Team PoC \normalfont(educational; \href{https://git.cyber.ayyalasomayajula.net/marsultor/linkedin-bot}{source})} + {Built, in under 12 hours, a TypeScript/Bun + Playwright proof of concept demonstrating how stealth-patched headless browsers defeat commercial bot detection: \texttt{dom.webdriver} suppression, fingerprint-evasion plugins, and authenticated session-state reuse driving fully automated crawling and interaction on a major professional network. Documents concrete gaps in client-side bot defenses; for educational purposes only.} +\resumeSubItem{Hardened SSH Portfolio Server --- Security PoC} + {Deliberately exposed a self-built stack --- native C++ FTXUI terminal UI over SSH (\texttt{ssh krishna@krishna.ayyalasomayajula.net}) plus a Next.js/Tailwind front end --- on a bare-metal production server with full home-LAN access, as a live proof of concept of my code and system hardening. Survived \textbf{1M+ automated attacks from 100 countries} over 18 months of continuous operation with zero compromise.}