field notes · since 2024

Notes from the night shift.

A security scrapbook — writeups, the tools I build, and the half-formed thoughts I have at 1 a.m. I write things down so I actually understand them.

currently poking at: smart TVs, tunnels, and AI agents.

~/robots.txt

# what the crawlers may index
User-agent: *
Allow:      /posts
Allow:      /tools
Allow:      /thoughts
Disallow:   /secrets
Crawl-delay: grab a coffee
# happy hacking — Het

/posts

Latest

newest first

#writeup#project#OSINT Sep 9, 2026 ~8 min

Overhead-The inspiration behind it

What is this project exactly?

#thoughts Sep 9, 2026 ~7 min

Shadow AI is a measurement problem

You cannot govern a data flow you cannot observe. Right now most enterprises cannot observe this one, and the vendor slides are ahead of the science.

#writeup#ebpf Jun 2, 2026 ~3 min

eBPF for the curious: watch a process without touching the kernel

eBPF lets you run small sandboxed programs inside the Linux kernel. It is the closest thing we have to a debugger for the whole machine.

#writeup#privacy May 14, 2026 ~3 min

How your smart TV phones home

The television is the one device in your house that watches you back. Here is the mechanism, and how to see it for yourself.

#thoughts#ai Apr 22, 2026 ~2 min

Treat the web like it's lying to you

We spent twenty years teaching developers not to trust user input. Then we built agents that trust every webpage they read.

view all posts →

/tools

Things I built

small, sharp, open source

Overhead — A Radar Scope For Your Roof

A Raspberry Pi radar that shows the planes above your house, chimes when one passes over, and keeps a log of every one it has ever seen

repo ↑

Stealth-Kernel-Module

This Linux Kernel module is meant to be hidden from all searches

repo ↑

IseeYou

A tool to map an IP address to a ASN and then a Organisation

repo ↑

Custom size File Generator

A tool to generate a random dummy file that is of a specified size

repo ↑

/thoughts

Half-formed

opinions subject to refactor

#thoughtsSep 9, 2026

Shadow AI is a measurement problem

You cannot govern a data flow you cannot observe. Right now most enterprises cannot observe this one, and the vendor slides are ahead of the science.

#thoughtsApr 22, 2026

Treat the web like it's lying to you

We spent twenty years teaching developers not to trust user input. Then we built agents that trust every webpage they read.

#thoughtsMar 9, 2026

The screwdriver test

I carry a screwdriver. Not as a bit, as a habit. Here is what it is actually for.

/about

$ whoami

Namaste — I'm Het. I'm a security researcher who learns by taking things apart, and this blog is where I write down the journey: the writeups, the tools, the dead ends, and the occasional idea worth keeping. Beginner or veteran, you're welcome here. Grab a coffee.

/contact

Say hello

email het.matrix@gmail.com

github github.com/het-joshi

linkedin in/hetjoshi