You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Integrate Push notification mechanism for iOS (UNNotificationServiceExtension) and Android (FirebaseMessagingService) into BareKit (which is Bare runtime integration for native applications)
Integrated low-level audio/video modules (ffmpeg, SDL3) into JavaScript through native bindings
NodeSecure
Security Researcher, 2021 – Present
Maintainer of js-x-ray: JavaScript static analysis engine
Led work on malware detection through spawn/exec pattern analysis
Designed new security probes
Postman
R&D Engineer, 2021 – March 2025
Lead macOS platform team: do preliminary research and help mates to pick up and achieve their goals.
Wrap Apple native (Objective-C) Linux and Win32 APIs (C, C++) through a unified C++ API (key-value store, open, HTTP server and client, UI).
Bridge various C++ APIs to the Javascript using the JavascriptCore engine.
Make our runtime compliant with existing Javascript and Node.Js APIs (setTimeout, console, process…)
tonygo.tech
Security Blog and Research
Share explorations on macOS internals and security—not just findings, but the full journey from question to insight
Document reverse engineering experiences with real-world samples and tooling
Explain systems programming from the perspective of a web developer with no prior low-level background
