cat whoami.md
werefin
$ id werefin
uid=1000(werefin) groups=quantum,crypto,offsec,blueteam
I'm a security research engineer. Security is what I focus on, every day: I build quantum key distribution (QKD) networks and quantum-safe networks, from the software that turns single-photon measurements into shared cryptographic keys to the networks themselves and their deployment in the real world. The rest of the time I try to break things, and then write down how to stop that from happening.
I don't put my name here on purpose. The ideas should stand without it.
what I work on
- Quantum-safe systems that have to survive outside the lab: real devices, real noise, real operators
- Designing, building and deploying the networks that carry quantum keys
- Key management and secure protocols, in languages that don't forgive mistakes
- Making classical, post-quantum and quantum security work together
- Test suites that try hard to make protocols fail before an attacker does
what I know
I write code in a lot of languages, mostly Go, Rust, C and Python, plus whatever the job needs that week. I'm not religious about any of them.
Security is the part I really care about. I spend my days on quantum key distribution and quantum networks, with a lot of cryptography around it, classical and post-quantum. When I'm not building things I like breaking them: pentesting, CTFs, testing networks for weak spots. And I've done enough time on the defensive side, watching alerts and chasing incidents, to respect the people who do it every day.
What ties it all together is architecture: thinking about how a whole system can fail, not just one piece of it, and designing it so that one mistake doesn't take everything down with it.
what I care about
- Quantum-safe security: "harvest now, decrypt later" is already happening
- Boring, verifiable software: small dependencies, strict types, and tests that run in CI
- Offense informs defense: I play CTFs and hack boxes so that what I build is designed against real attacks, not imagined ones
- Curiosity: there's always something in quantum information I haven't figured out yet, and that's what keeps me going.
why this site exists
My work gets plenty of attention every day. The rest of me doesn't. This is the place for the things that don't fit in a meeting or a paper: whatever is on my mind, the choices I make and the ones I'm not sure about, and the questions that show up when everything is quiet.
I don't write to give answers, because most of the time I don't have them. I write to think out loud, and in the hope that something here makes you stop for a moment and ask the same questions about your own life. And it's no different with security, the other thing that never really leaves my head: real attacks, cryptography and quantum security, from QKD to what quantum computers will break.
No name, no cookies, no trackers: just the words, and whoever wants to read them.
reach me
Leave a comment under any post, or write to me privately through the contact page. No account needed either way, and you can stay anonymous.