vmfunc.re · lockpicking but for computers

Profile

handle: vmfunc | ΘΔ | it/its | plural system of 7 | bay area

mostly known for: RE, exploit dev, security research. philes at nullpt.rs and ud2. tcp.direct. eternally dg. runs an AS and owns boxes. DJ when the terminal gets boring.

currently work on cybersecurity related tasks and ai alignment and safety.

previously at nous, thales, turingpi, lunchcat. started with game cheats... went sideways from there.
welcome to my small corner of the internet. feel free to have a look around!
or, here's what the press has to say about me.

github · soundcloud · ident.txt

last updated: 2026-06-17

Philes

	silicon anthropology	substack · 2026
	preemptive grief dressed as epistemics	substack · 2026
	the watchers, pt. 2: the correspondence	2026
	the watchers: how openai, the US government, and persona built an identity surveillance machine that files reports on you to the feds	2026
	top 20 worldwide with social-engineering and a cheat that's still undetected	ud2 · 2026
	i cracked a $200 software protection in a day with xcopy	ud2 · 2025
	forging passkeys: exploring the FIDO2 / WebAuthn attack surface	nullpt.rs · 2025
	exploiting representational discontinuities in transformer architectures	2025
	puppets	2025
	reverse engineering arm64 hypervisor internals, exploring the el2 abstraction	2024
	emptiness	2024
	untitled	2024
	moonlight	2023
	how to: server side template injection	2023

also on: nullpt.rs ud2.rip

me, if you even care

.plan

the classic finger(1) status file. what i'm actually up to. also at /.plan.

─── vmfunc · .plan ──────────────────────────────────────
▶ doing
  · statusline session names
  · zen ext: claude auto-sorts tabs into groups, live, as i browse   [building]
    goal: group tabs while browsing so i can CLOSE groups to free ram but keep them for later.
    firefox webextension (zen = ff fork) + tabGroups API; claude API classifies (key via sops).
    MUST be modular in nixfiles (home-manager module) so other pcs get it too.

▷ next
  · coral: verify dashboard fullscreen + setWallpaper AppleEvent timeout (needs console TCC)
  · coral: pair syncthing device IDs once otter+cuttlefish syncthing are up
  × coral: on otter grant App Mgmt to WezTerm then just switch + sudo tailscale up (otter onto tailnet, lights up remote builder + syncthing)
  · zen ext: get AMO signing creds (web-ext sign --channel unlisted) for permanent install
  · wire otter CI runner            [blocked: asriel's runner token]
  · flesh out the sops secrets layer

~ someday
  · typed rice.theme polish
  · rice.bar / waybar parity

Friends

Communities/Other

a proud member of the orange team of 512KB club

Press about me

Zyphe what the incident reveals	2026-03
Pravda DE 🇩🇪 openai & persona spionieren nutzer aus	2026-02
AfroTech discord cuts ties with persona	2026-02
GIGAZINE 🇯🇵 identity surveillance system	2026-02
Livedoor 🇯🇵 国民の身元を監視するシステム	2026-02
Techdirt the surveillance stack inside your age check	2026-02
WinBuzzer leaked code reveals surveillance network	2026-02
Fortune discord distances itself from persona	2026-02
HotHardware discord concludes persona pilot	2026-02
iPhones.ru 🇷🇺 большому брату привет	2026-02
Hacker News the watchers (657 pts)	2026-02
Biometric Update persona pushes back	2026-02
Crowdfund Insider allegations of sharing user data	2026-02
ID Tech Wire the biometric surveillance stack	2026-02
L'Indipendente 🇮🇹 la verifica dell'età come sorveglianza	2026-02
PiunikaWeb persona ceo releases the email chain	2026-02
igor'sLAB 🇩🇪 wenn alterscheck nach fincen riecht	2026-02
Privacy Guides the watchers	2026-02
Kotaku hackers raise the alarm	2026-02
Malwarebytes persona left its frontend exposed	2026-02
Security Boulevard frontend exposed	2026-02
Cybernews leak links age verification to federal surveillance	2026-02
PC Gamer 269 verification checks	2026-02
DL News sharing crypto addresses with the feds	2026-02
The Rage exposing the surveillance web	2026-02
Tildes the watchers	2026-02
Tech Start XYZ 🇧🇷 sistema de verificação de identidade	2026-02
Hacker News top-20 worldwide with an undetected cheat	2026-02
El Ecosistema Startup 🇪🇸 vigilancia de identidad con ia	2026-02
Lobsters the watchers	2026-02
Punto Informatico 🇮🇹 persona: sistema di sorveglianza	2026-02
Adrenaline 🇧🇷 discord desiste da verificação facial	2026-02
Habr 🇷🇺 данные властям сша и канады	2026-02
Zhihu 🇨🇳 失控的AI身份核验	2026-02
Wikipedia cites the watchers as a source	2026
Hacker News the epstein files aren't really redacted	2025-12
Adafruit cracking $200 protection with xcopy	2025-12
Hacker News the xcopy crack	2025-12
Brodie Robertson "banned for trolling the linux kernel" (youtube)	2025-10
The Lunduke Journal on the github suspension	2025-10
Hacker News "github bans vmfunc"	2025-10
Hacker News forging passkeys (fido2/webauthn)	2025-06
Lobsters forging passkeys	2025-06
Hacker News github css injection	2024-06

or, here's what the press has to say about me.

blogs

[-]	nullpt.rs security research collective
[-]	ud2.rip reverse engineering & cracks
[-]	tcp.direct the homies
[-]	substack longer-form, on substack
[-]	vmfunc.re/blog my philes, right here

i DJ sometimes. mostly drain gang adjacent, cloud rap, emo electronic, whatever's in the headphones at 3am.

latest set: soundcloud.com/single

on heavy rotation

 [♫] toby fox · undertale / deltarune brainrot
 [♫] rxknephew · top track "crack dreams"
 [♫] drain gang · bladee, ecco2k, thaiboy digital
 [♫] whatever's in the headphones at 3am

last.fm scrobbles load when you click this tab.

/// rendering... 99% /// this directory has been at 99% since 2019. it's fine. it's a vibe. ///

the network. (such as it is.)

the boxes. all hosted in the US. sometimes they're online, sometimes they're not. it's part of the charm.

Server Status

Server	Status	Latency

ASN Information

Loading ASN information...

Last updated: -

GitHub:	@vmfunc
Twitter:	@vmfunc
Email:	celeste@linux.com
Matrix:	@vmfunc:mozilla.org

Note

twitter or email for anything urgent. matrix is hit or miss - i'm there when i'm there.