Technical notes

Browser security, automation, reverse engineering, and the things I learn while building.

• Unlock Brave Origin Without Paying

  The Android Origin gate verifies subscription credentials against a public key the server hands back, with no issuer pinning. A local policy path never redeems them, so a forged credential is enough.

  2026-06-30 · 4 min read

• Tuning Patchright for fingerprint-stats pages

  Why AmiUnique and WebRTC leak tests need a different approach than bot-detection demos, and how WebSkrap handles them with native Chromium flags and opt-in context metadata instead of JavaScript spoofing.

  2026-06-07 · 5 min read

• Passing Bot Detection in Headless Chrome

  Making headless Chromium clear the same bot-detection suite as headed mode with a simulated screen and a masked user agent, no JavaScript spoofing.

  2026-06-03 · 4 min read

• Teensy BadUSB reverse shell POC

  HID keyboard injection on a Teensy 3.2 chains into a fileless PowerShell reverse shell on Windows.

  2026-05-07 · 4 min read

• Skia Graphite compositing bug: Chromium on macOS

  A GPU rendering synchronization bug causing visual corruption on macOS, and how to fix it.

  2026-05-06 · 4 min read