> Welcome

The world is built on systems you can't see. Behind every login screen, every message, every transaction lies layers of protocols — some open, others closed. Most people interact with these systems without ever thinking about how they work, or who actually controls them.

This website is about looking behind the facade.

I'm bigbadman — and my interests converge around one central question: Who has power over your data?

🔐> Encryption

Cryptography is ancient. Once, only militaries and governments had access to strong encryption. Today, every smartphone carries cryptographic algorithms that would have led the U.S. government to classify them as weapons 30 years ago. Yet most people live as if their communications are private, without understanding the foundation. Here I explore how encryption actually works — from AES and RSA to zero-knowledge proofs — and why it more often fails due to human error than mathematical weakness.

🌐> Open Source

Open source isn't just a licensing model. It's a philosophy: software that runs our lives should be inspectable, auditable, and improvable by anyone. You can't trust a system you're not allowed to look inside. But open source is under pressure — from companies that "embrace, extend, extinguish," and from licenses that gradually close what was once open. I dive into projects holding onto openness, and discuss why transparency is necessary for security.

💻> Hacking

Hacking isn't what movies tell you. It's not a black hoodie and green text on black screens. It's methodical, patient work to understand how systems are built — and find where assumptions break down. A hacker always asks: "What if the input isn't what the developer expected?" It's a mindset, not a crime. Here I share techniques, tools, and case studies — responsibly, and with respect for the ethical line separating investigation from abuse.

These three areas overlap more than they seem. Encryption without open implementation is blind trust. Open source without security analysis is an illusion of safety. And hacking without understanding both is just chaos.

// connection secured // no logs retained // welcome to the desert of the real