i wear many hats.
i'm molly, i build and break things across the stack - not to do everything, but to have fun.
connect
feel free to reach out for collaborations or secure communication.
selected projects
Belfast
An open-source Azur Lane server emulator written in Go. High performance and scalable architecture.
semantic-chan
CLI / MCP / HTTP server designed to index huge codebase to allow semantic searching for humans or LLMs.
pgp-mfa
Proof of concept MFA authentication method using PGP keys.
jabberwock
An org-wide secrets scanner that runs on every GitHub push and routes hash-only findings to Slack and a read-only dashboard. Used at Galadrim.
research
responsible disclosures, bugs, and vulnerability research highlights.
Santé Publique France
Reported an IDOR vulnerability that exposed PII.
Proton
Identified an issue with user data handling.
X (Twitter)
Reported a web & mobile DoS bug with Direct Messages.
witr (open-source)
Hardened terminal output against ANSI/OSC injections, preventing terminal manipulations.
ClickHouse (open-source)
Tracked down a join optimizer segfault caused by a NULL dereference.
writing
A ClickHouse segfault in query planning (and the 5-line fix)
A KPI query started killing ClickHouse after a harmless WHERE clause. It turned out to be a NULL type pointer created by unordered_map operator[] during partial evaluation of join filters.
Everything I Self-Host at Home
A grounded look at my home stack: three machines, a single public entrypoint, and the operational choices behind owning core services.
My Crypto Portfolio Strategy for 2026: A Deep Dive into Bitcoin, Ethereum, Solana, Polkadot, and Cardano
A disciplined 2026 DCA strategy across BTC, ETH, SOL, DOT, and ADA, with catalysts, staking economics, and risk management.
Postgres to ClickHouse, then the embeddings pipeline became the real migration
A ClickHouse backfill that surfaced a slow embedding worker, and the inference optimizations that made it behave like a GPU service (microbatching, TensorRT, caches, and the next bottleneck).
Secrets scanning for a 200+ repo GitHub org, with zero developer setup
An org-wide, push-triggered secrets scanner: webhook → Lambda → TruffleHog → hash-only findings → Slack + read-only dashboard.
From 4M comments to a style-controlled comment generator
How I turned 4M scraped comments into a style-controlled comment generator.