https://konukoii.com/blog/ Unpublished Thoughts en Tue, 21 Oct 2025 12:00:00 GMT https://konukoii.com/blog/2025/10/21/5-min-tutorial-building-pypi-packages/ https://konukoii.com/blog/2025/10/21/5-min-tutorial-building-pypi-packages/ Tue, 21 Oct 2025 12:00:00 GMT Turning a throwaway image-generation script (Imagenation, built on Google's Imagen API) into a real pip-installable PyPI package — restructuring into a module, wiring up pyproject.toml, and the build/twine upload dance. Tutorials https://konukoii.com/blog/2025/10/15/vibecoding-an-esp32-door-monitor/ https://konukoii.com/blog/2025/10/15/vibecoding-an-esp32-door-monitor/ Wed, 15 Oct 2025 12:00:00 GMT A hands-on write-up of building "Tripwire," my ESP32 door monitor that pairs a magnetic reed switch with a clever Bluetooth SPP trick to tell whether it was me or a stranger who opened the door, sending alerts via ntfy.sh. Vibe Coding https://konukoii.com/blog/2018/02/21/understanding-quantum-cryptography/ https://konukoii.com/blog/2018/02/21/understanding-quantum-cryptography/ Wed, 21 Feb 2018 12:00:00 GMT My educational explainer on quantum cryptography, walking through the BB84 quantum key distribution scheme — how photon polarization and the Heisenberg uncertainty principle secure a key exchange and expose eavesdroppers — and how it contrasts with post-quantum cryptography. Cryptography https://konukoii.com/blog/2018/02/19/twitter-sentiment-analysis-using-combined-lstm-cnn-models/ https://konukoii.com/blog/2018/02/19/twitter-sentiment-analysis-using-combined-lstm-cnn-models/ Mon, 19 Feb 2018 12:00:00 GMT Combining CNNs and LSTMs for tweet sentiment analysis — the intuition behind each network, two stacked architectures (CNN-LSTM vs. LSTM-CNN), and why ordering the LSTM first wins, trained on 1.5M+ labeled tweets. CompSci https://konukoii.com/blog/2018/02/16/5-min-tutorial-root-via-uart/ https://konukoii.com/blog/2018/02/16/5-min-tutorial-root-via-uart/ Fri, 16 Feb 2018 12:00:00 GMT Connecting to a TP-Link WR841N router over UART with the Attify Badge — identifying GND/VCC/TX/RX, scanning for the baud rate with devttys0's baudrate.py, and dropping into a root shell, plus notes on TP-Link weakening hardware security between versions. CompSec Hardware https://konukoii.com/blog/2018/02/13/lifting-firmware-with-the-bus-pirate/ https://konukoii.com/blog/2018/02/13/lifting-firmware-with-the-bus-pirate/ Tue, 13 Feb 2018 12:00:00 GMT Opening a TP-Link WR841N router, wiring its W25Q32.V EEPROM to a Bus Pirate over SPI, dumping the firmware with flashrom, and extracting the embedded Linux filesystem with binwalk. CompSec CompSci Tutorials Hardware https://konukoii.com/blog/2018/02/09/internet-memories-2-break-the-rules/ https://konukoii.com/blog/2018/02/09/internet-memories-2-break-the-rules/ Fri, 09 Feb 2018 12:00:00 GMT 2007 Caracas, a Linux Magazine, and aircrack-ng — the night a kid broke WEP and got "Free. Internet. Everywhere!" Told inside a terminal: run each command to unlock the next beat of the story. Writing CompSec CompSci https://konukoii.com/blog/2018/02/08/building-simple-webapps-with-flask-javascript/ https://konukoii.com/blog/2018/02/08/building-simple-webapps-with-flask-javascript/ Thu, 08 Feb 2018 12:00:00 GMT Building a small leaderboard web-app with a Flask back-end and a jQuery/AJAX front-end — a brutally simple micro-framework server exposing GET/POST/DELETE API routes, plus the JavaScript that fetches and live-updates the page. CompSci Tutorials https://konukoii.com/blog/2017/05/31/eagle-eye/ https://konukoii.com/blog/2017/05/31/eagle-eye/ Wed, 31 May 2017 12:00:00 GMT EagleEye, a wireless network monitoring tool built for non-technical users: a 815-person survey on why people need it, then the architecture — libtins/dot11decrypt decrypting live monitor-mode packets, Scapy filtering them, and a Flask server feeding simple graphs to the browser. With git repo, paper, and PDF. CompSec https://konukoii.com/blog/2017/04/10/demystifying-cryptography/ https://konukoii.com/blog/2017/04/10/demystifying-cryptography/ Mon, 10 Apr 2017 12:00:00 GMT A Crypto 101 tour for the curious: what cryptography is, its goals, the anatomy of a secure connection, and the intuition behind Diffie-Hellman key exchange (with a live interactive demo of two parties agreeing on a shared key over an open wire) and the Caesar cipher. CompSec Cryptography https://konukoii.com/blog/2017/04/06/introduction-supersingular-isogeny-diffie-hellman/ https://konukoii.com/blog/2017/04/06/introduction-supersingular-isogeny-diffie-hellman/ Thu, 06 Apr 2017 12:00:00 GMT An approachable introduction to Supersingular Isogeny Diffie-Hellman (SIDH) — one of the few post-quantum key exchanges built on elliptic curves — written for an Elliptic Curve Cryptography course: its motivation, the math you need (isogenies, the j-invariant, supersingular curves), the key exchange itself, and Costello et al.'s recommended parameters. Rebuilt from the original LaTeX, led in by the post's own blurb. Cryptography CompSci https://konukoii.com/blog/2017/03/07/break-free-bypassing-captive-portals/ https://konukoii.com/blog/2017/03/07/break-free-bypassing-captive-portals/ Tue, 07 Mar 2017 12:00:00 GMT Bypassing hotel/airport/cafe captive portals by tunneling traffic over DNS with Iodine — the escape strategy, server + domain setup, and the iodine/proxychains client side. CompSec Tutorials https://konukoii.com/blog/2017/01/15/5-min-tutorial-k-means-clustering-in-python/ https://konukoii.com/blog/2017/01/15/5-min-tutorial-k-means-clustering-in-python/ Sun, 15 Jan 2017 12:00:00 GMT A five-minute tutorial on K-Means clustering in Python — with a live, animated visualizer that shows exactly how the clusters get selected: random centers, assign-to-nearest, recenter, repeat to convergence. CompSci Tutorials https://konukoii.com/blog/2017/01/11/soundcloud-spam-analysis/ https://konukoii.com/blog/2017/01/11/soundcloud-spam-analysis/ Wed, 11 Jan 2017 12:00:00 GMT Crawling 20 million SoundCloud users with a Docker crawler army (and a "borrowed" public API key), then using K-Means clustering and a Keras neural net to find and predict spam accounts — with dataset, paper, code, and PDF at the end. CompSci https://konukoii.com/blog/2016/12/31/recap-2-end-of-the-year/ https://konukoii.com/blog/2016/12/31/recap-2-end-of-the-year/ Sat, 31 Dec 2016 12:00:00 GMT A year-end look back at 2016: graduating from UCSB with Honors, 2-3 posts a month, 4 papers, releasing Pydradis / Duckhunt / Pylogger, DEFCON & CHES, and a turn toward post-quantum crypto and neural nets. Writing https://konukoii.com/blog/2016/12/20/twitter-sentiment-analysis-with-neural-networks/ https://konukoii.com/blog/2016/12/20/twitter-sentiment-analysis-with-neural-networks/ Tue, 20 Dec 2016 12:00:00 GMT Hand-coding a Feed-Forward Neural Network from scratch to classify tweets as positive or negative, comparing Bayesian probabilities, Keras word embeddings, and a hand-built feature vector (~70% accuracy) against a Keras NN. CompSci https://konukoii.com/blog/2016/10/26/duckhunting-stopping-automated-keystroke-injection-attacks/ https://konukoii.com/blog/2016/10/26/duckhunting-stopping-automated-keystroke-injection-attacks/ Wed, 26 Oct 2016 12:00:00 GMT How RubberDucky / BadUSB automated keystroke-injection attacks work, and DuckHunt — a small defense that distinguishes a real user from an injected burst by typing speed, with four protection policies (Normal, Paranoid, Sneaky, Logging Only). Includes a playable NES-style Duck Hunt mini-game of the detection problem. CompSec https://konukoii.com/blog/2016/10/10/coding-chrome-extensions-quickly/ https://konukoii.com/blog/2016/10/10/coding-chrome-extensions-quickly/ Mon, 10 Oct 2016 12:00:00 GMT A fast, practical walkthrough of building a Chrome extension — manifest, background script, pop-up, options, testing and publishing — using the author's Hidden: Auto-Incognito filter as the worked example. CompSci Tutorials https://konukoii.com/blog/2016/10/03/online-memories-1-1am/ https://konukoii.com/blog/2016/10/03/online-memories-1-1am/ Mon, 03 Oct 2016 12:00:00 GMT A childhood memory of sneaking onto the family's old Compaq at 1am — free dial-up ran 1am–6am — to explore the early internet, the Avila and the lights of Caracas out the window. Read it on the screen of the old machine itself. Writing https://konukoii.com/blog/2016/09/27/capture-the-keys-chapter-2-pylogger/ https://konukoii.com/blog/2016/09/27/capture-the-keys-chapter-2-pylogger/ Tue, 27 Sep 2016 12:00:00 GMT My Python reimplementation of the earlier C++ keylogger, walking through building an efficient Windows keylogger with PyHook — keystroke capture, window-aware logging, log rotation, and typed-keyword triggers (status, dump, pause, kill) — as an educational security exercise. CompSec Tutorials https://konukoii.com/blog/2016/09/19/11-oddly-specific-yet-useful-security-tips/ https://konukoii.com/blog/2016/09/19/11-oddly-specific-yet-useful-security-tips/ Mon, 19 Sep 2016 12:00:00 GMT Eleven weird-but-genuinely-useful security tips for the curious non-expert, from killing WPS to keylogging your own machine — now with a 2026 retraction on the RFID-credit-card advice. CompSec Tutorials https://konukoii.com/blog/2016/09/18/magstripe-tinkering/ https://konukoii.com/blog/2016/09/18/magstripe-tinkering/ Sun, 18 Sep 2016 12:00:00 GMT My hobbyist dive into magnetic stripe card technology: how magstripes encode data, and how I hacked a Square reader by bypassing its encryption chip to read raw card data, with some reflections on real-world magstripe security. CompSec CompSci Tutorials Hardware https://konukoii.com/blog/2016/08/18/capture-the-keys-chapter-1-clogger/ https://konukoii.com/blog/2016/08/18/capture-the-keys-chapter-1-clogger/ Thu, 18 Aug 2016 12:00:00 GMT A post-mortem of my first keylogger — a ~280-line C++ prototype I built for Windows back in college to monitor my own machine — covering its key-state polling, shift/caps filtering, window tracking, and stealth tricks, plus why I eventually abandoned it for Python. CompSec Tutorials https://konukoii.com/blog/2016/08/11/survey-of-cryptographic-implementations-and-vulnerabilities-on-passive-rfid-devices/ https://konukoii.com/blog/2016/08/11/survey-of-cryptographic-implementations-and-vulnerabilities-on-passive-rfid-devices/ Thu, 11 Aug 2016 12:00:00 GMT A 20-page survey paper (UCSB) on the cryptography of passive RFID tags — system and adversary models, the attack landscape, the famous Mifare and DST breaks, and mitigation strategies — rebuilt from the original LaTeX, led in by the post's own plain-English "quick version." Cryptography https://konukoii.com/blog/2016/06/30/calculating-nonlinearity-of-boolean-functions-with-walsh-hadamard-transform/ https://konukoii.com/blog/2016/06/30/calculating-nonlinearity-of-boolean-functions-with-walsh-hadamard-transform/ Thu, 30 Jun 2016 12:00:00 GMT A short cryptography paper (UCSB) on what nonlinearity means for boolean functions and how to measure it with the Walsh-Hadamard transform — rebuilt from the original LaTeX with a live calculator: flip an 8-bit truth table and watch its Walsh spectrum and nonlinearity recompute. Cryptography https://konukoii.com/blog/2016/04/21/pentesting-101-setting-up-your-lab/ https://konukoii.com/blog/2016/04/21/pentesting-101-setting-up-your-lab/ Thu, 21 Apr 2016 12:00:00 GMT A 10-minute walkthrough for building your own hacking lab — VirtualBox, a Kali attacker VM, a Kioptrix victim VM, and an internal network — read as a git-graph: each step collapses as you scroll past it. CompSec Tutorials https://konukoii.com/blog/2016/04/04/git/ https://konukoii.com/blog/2016/04/04/git/ Mon, 04 Apr 2016 12:00:00 GMT A five-minute, bare-bones intro to git and Github — init, status, add, commit, log, diff, push — now with a fake in-browser terminal you can actually type the commands into. CompSci Tutorials https://konukoii.com/blog/2016/03/29/diary-of-an-immigrant/ https://konukoii.com/blog/2016/03/29/diary-of-an-immigrant/ Tue, 29 Mar 2016 12:00:00 GMT A short story written for IB English in 2010 — the diary of a young Irish emigrant crossing to America in 1938, sighting the Statue of Liberty from the deck. Presented as a journal you leaf through, page by page. Writing https://konukoii.com/blog/2016/03/24/caesar-cipher-in-scala/ https://konukoii.com/blog/2016/03/24/caesar-cipher-in-scala/ Thu, 24 Mar 2016 12:00:00 GMT A five-minute tutorial: implementing the oldest trick in cryptography in a handful of lines of Scala — with a live shift visualizer and an interactive cipher generator. Cryptography CompSci Tutorials https://konukoii.com/blog/2016/03/23/android-tutorial/ https://konukoii.com/blog/2016/03/23/android-tutorial/ Wed, 23 Mar 2016 12:00:00 GMT A quick, 4-hour Android tutorial written for UCSB's CS56 class — hosted on GitHub in markdown, paired with a 'legacy' SMS-driven Android service for students to keep building on. CompSci Tutorials https://konukoii.com/blog/2016/03/22/physical-unclonable-functions/ https://konukoii.com/blog/2016/03/22/physical-unclonable-functions/ Tue, 22 Mar 2016 12:00:00 GMT A grad-class intro to PUFs — hardware functions whose challenge-response mapping falls out of physical manufacturing variation — covering their key principles, types, properties, and the intra-/inter-distance math used to measure them. Cryptography CompSci https://konukoii.com/blog/2016/03/21/a-poem-for-my-scottish-teacher/ https://konukoii.com/blog/2016/03/21/a-poem-for-my-scottish-teacher/ Mon, 21 Mar 2016 12:00:00 GMT A short, fevered poem written in 2010 to explain a sick-day absence to a Scottish English teacher — presented here as illuminated verse. Writing https://konukoii.com/blog/2016/03/18/wwii-and-computers/ https://konukoii.com/blog/2016/03/18/wwii-and-computers/ Fri, 18 Mar 2016 12:00:00 GMT An old IB History paper asking whether modern electronic computers were built for war or merely re-purposed for it, plus a look at their wartime origins. CompSci https://konukoii.com/blog/2016/03/17/bayes-theorem-and-stochastic-processes/ https://konukoii.com/blog/2016/03/17/bayes-theorem-and-stochastic-processes/ Thu, 17 Mar 2016 12:00:00 GMT A short discrete-maths paper on deterministic vs. stochastic systems, conditional probability, and Bayes' theorem — with a live base-rate visualizer that shows why a 99%-accurate test for a rare condition is mostly wrong. CompSci Tutorials https://konukoii.com/blog/2016/03/16/recap/ https://konukoii.com/blog/2016/03/16/recap/ Wed, 16 Mar 2016 12:00:00 GMT Kicking off the blog: a public journal for scholastic ideas, plus a quick recap of grad school, a crypto class, an internship, and a capstone win. Writing