email · telegram · channel · x · course
Тоҷикӣ · Русский · English
I build products end to end — backend, mobile, web, infrastructure. Most of what I ship carries other people's traffic and payments, which is why security is not a layer I add at the end.
|
Backend — Go and Rust services, PostgreSQL, payment reconciliation across independent providers, subscription logic. Mobile — Android in Kotlin: VPN client with kill switch, self-healing across network changes, Play-compliant releases. Web — Next.js and TypeScript when the product needs it; plain HTML and vanilla JS when a framework would only add weight. Infra — Linux, Docker, CI with tests and fuzzing, metrics and alerting that fire before users notice. |
Transport crypto — hybrid post-quantum handshakes, traffic-shape resistance, profiles that survive active probing. Infrastructure — protocol ingress and failover, key rotation, per-IP abuse limits, secrets kept out of images and backups. Hardening — property-based tests and fuzz targets in CI, threat-driven review, closing the gap between what docs promise and what the service does. Study — going deep into offensive and defensive security, publishing the whole curriculum as I work through it. |
|
|
A 270-day path from zero to junior, fully bilingual in Russian and Tajik. Nine months of daily lessons · 270 knowledge checks that gate progress, so a day cannot be closed without passing · CTF challenges verified offline against hashed flags · 6 practical exams · 10 portfolio projects. The site generates itself from Markdown, runs with no framework and no build step, and embeds every lesson video in the page — the player is created only on click, so nothing reaches Google until you press play. |
|
|
A modular networking platform. Hybrid post-quantum crypto, multipath transport, FEC, adaptive obfuscation profiles, a WASM plugin host, cluster gossip with failure detection, OTLP metrics — with property-based tests and fuzz targets wired into CI. |
|
|
A VPN product end to end: backend, Android client, desktop app, Telegram bots, a white-label partner platform, and several payment paths reconciled against one another so no purchase is counted twice or lost. |
|
Security work only where there is permission: my own systems, my own infrastructure, and legal training ranges. That boundary is written into my course, and I hold to it myself. |
Full-stack and security engineering — backend systems, hardened infrastructure, and the interfaces on top of them. |