/now
What I'm doing now
Based in Istanbul, Turkey. Working as a Senior Consultant at PwC, leading red team operations, and conducting independent vulnerability research.
Last updated: August 2026 · Inspired by Derek Sivers' /now page movement.Active Research
- macOS & iOS IPC Boundaries: Auditing XPC listener validation primitives, Mach-O code requirement constraints, and App Group shared container boundaries.
- Autonomous AI Execution Safety: Designing deterministic capability brokers, strict out-of-band scope registries, and non-bypassable policy gates for offensive AI agents.
- External Attack Surface Graphing: Formalizing multi-source asset attribution methodologies combining DNS SOA authority, TLS certificate chains, and IP registry ownership.
Technical Writing
- Completing the multi-part External Perimeter Analysis field series on jankesec.
- Documenting practical detection telemetry and negative controls for Active Directory hardening (Kerberos delegation, LDAP signing, and Tier 0 account isolation).
Current Reading & Deep Dives
- Apple Silicon security mitigations: Pointer Authentication (PAC), Page Protection Layer (PPL), and Secure Page Table Monitor (SPTM) architecture.
- Linux kernel memory allocator internals, eBPF security observability, and Yama LSM ptrace boundaries.