$ whoami
Franco. Security researcher and bug bounty hunter from Lima. I spend my days finding the gap between what software is supposed to do and what it actually does, and my evenings hanging from a bar or stirring a pot. Autistic, vegan, allergic to dogma. I like edge cases, in code and in arguments.
Stack
- Breaking
- Burp SuiteOWASP ZAPFoundrySlitherSemgrepnmapProxmark3ESP32
- Writing
- TypeScriptRustGoPythonSolidityCBashHaskell
- Running on
- LinuxBSDCloudflareAWSGCPDockerNix
- Thinking in
- Threat modelsSupply chainsEVM internalsNetworksGame theory
Off the clock
Calisthenics
Bodyweight only. Pull ups, dips, levers (wip), handstands (wip). No excuses, gravity is always available.
Cooking
Fully vegan, mostly eating rice. Peruvian base with whatever I picked up abroad. I treat recipes like code: fork, patch, ship.
DIY and hardware
Microcontrollers, RFID, soldering things that did not ask for it. If it has a chip, I want to know what it is hiding.
Ethics
Reasoned from first principles, not from custom or laws. Power asymmetries are a security problem too, just with worse logging.
Music and languages
Some non-pop goes a long way. Spanish, English, some Japanese, a bit of Portuguese.
Speed coding
Clash of Code addict, CodeWars enthusiast. Years in the top 100 of 100k players, which is a fancy way of saying I type fast under pressure.
Elsewhere
I write in Spanish about security and programming at fredrare.com. Code lives on GitHub. If you want to talk, there is a form with a captcha, because the internet is what it is.