Systems Engineer, 2025 – Present
- Integrate Push notification mechanism for iOS (
UNNotificationServiceExtension) and Android (FirebaseMessagingService) intoBareKit(which is Bare runtime integration for native applications) - Integrated low-level audio/video modules (
ffmpeg,SDL3) into JavaScript through native bindings
Security Researcher, 2021 – Present
- Maintainer of
js-x-ray: JavaScript static analysis engine - Led work on malware detection through spawn/exec pattern analysis
- Designed new security probes
R&D Engineer, 2021 – March 2025
- Lead macOS platform team: do preliminary research and help mates to pick up and achieve their goals.
- Wrap Apple native (Objective-C) Linux and Win32 APIs (C, C++) through a unified C++ API (key-value store, open, HTTP server and client, UI).
- Bridge various C++ APIs to the Javascript using the JavascriptCore engine.
- Make our runtime compliant with existing Javascript and Node.Js APIs (
setTimeout,console,process…)
Security Blog and Research
- Share explorations on macOS internals and security—not just findings, but the full journey from question to insight
- Document reverse engineering experiences with real-world samples and tooling
- Explain systems programming from the perspective of a web developer with no prior low-level background
C, C++, JavaScript, Objective-C, Swift, Mach-O, LLDB, Binary Ninja, macOS/iOS Internals