Hi, I'm Springfield Yonga.

01_WHOAMI

I'm an independent security researcher who go by the name  halfabit  . I spend most of my time reading code that was never meant to be read closely — protocol parsers, allocators, firmware blobs — and figuring out where the assumptions break.

This site is where I write it down. Not just the bugs, but the process around them: the dead ends, the tooling, and the parts that don't fit in a CVE description. If a write-up here saves you three weeks of heap grooming, it did its job.

02_PROFILE

ROLE

Independent security researcher

FOCUS

Memory safety · protocol parsers · fuzzing

BASED

Remote

DISCLOSURE

Coordinated · 90-day default

03_CONTACT

Reach me on GitHub. For anything sensitive, encrypt it to my PGP key. New write-ups go out over RSS.