Bartosz Osiej BartoszOsiej

Important

19 y/o · Poland · open to first paid role — remote/hybrid, junior systems/backend. My article on eBPF ransomware detection is accepted on LinuxSecurity (publication Sep 22–26) — technical writing samples on request. Author of The Stitcher Trilogy (crime horror). Launch week (Sep 22-29): Externum on DevHunt | new: Talus Field Guide - deployment & tuning playbook. Everything below is deployed infrastructure, not tutorials: 24 public repositories, every active one with CI/CD, releases with binaries, Docker images and published packages. 3 PRs open upstream in aya-rs/book.

⚙️ Stack

🚀 Flagship Projects

🔬 Talus

eBPF endpoint security agent — kernel-level execve/openat/connect tracing through Aya, per-CPU perf buffers, sliding-window alerting, automated SIGKILL response, full FrankenTUI.

Rust Aya FrankenTUI eBPF

🎮 NV2_ENGINE — VIVIA

Voxel survival engine with NASA POWER real-climate worlds and an embedded MeMLP neural network. EGS submission kit ready — published as nv2_engine on crates.io.

▶ Landing page

Rust wgpu MeMLP NASA-climate

⚡ externum

Programming language built from scratch — compiles to Python, Bash and native binary. Ownership, traits, macros. 307-test suite, on PyPI since v2.

▶ Run it in your browser — and extend the language live

Python Compiler design PyPI

🔒 CyberForge

Four security tools as one workspace — port scanner, web scanner, hash cracker, packet analyzer. Each shipped separately on crates.io.

Rust Tokio libpcap

🛡️ QuantumShield

Post-quantum file encryption CLI — ML-KEM-768 key exchange + AES-256-GCM + HKDF. NIST FIPS 203 compliant, fuzz-tested.

▶ Landing page

Rust Cryptography NIST

🧬 Docs

Technical documentation site — architecture guides, API reference, deployment playbooks.

TypeScript Deploy GitHub Pages

🪙 pqbit

Post-quantum Bitcoin from genesis — fair-launch UTXO chain with only NIST PQ signatures (ML-DSA-44 / SLH-DSA, FIPS 204/205), no ECDSA ever. Gossiping p2p network, PQ-validated mempool, continuous mining. Genesis parameters in public review; grant application filed (NGI Zero / NLnet, decision Nov 2026).

▶ Landing · ▶ GENESIS.md — open review

Rust Post-quantum Bitcoin research p2p

📝 Technical Writing

Publiczne artykuły o tym, jak działają rzeczy na niskim poziomie — z kodem, nie z marketingiem.

Detecting ransomware with eBPF in Rust (2026-09-16) — tutorial: tracepointy execve/openat, per-CPU perf buffers, sliding-window detection, automated SIGKILL. Kod źródłowy: talus-process-monitor.
Catching ransomware with eBPF: what execve/openat tracing taught me about false positives (2026-09-13) — deep-dive: behavioral tracing, scoring without false positives, lessons from production-grade builds.

Writing for: Draft.dev · Corellium · Honeybadger · Mattermost · Vultr · Semaphore · SigNoz · Edge Network. → wszystkie writing samples

📦 More projects (click to expand)

	Project	What it is	Try it
🔐	Fortis	Bare-metal RISC-V measured boot — SHA-256 + ML-KEM-768 chain of trust	QEMU
◈	Aurora	Complete OS in the browser — kernel, window manager, filesystem, 8 apps, procedural audio	npm
🌐	Meshcore	Serverless P2P chat — WebRTC + MQTT signaling, zero dependencies	npm
🔗	Shortlink	URL shortener — JWT auth, click tracking, React dashboard	PyPI
🎯	Promptbox	Remote prompt inbox for AI agents — mobile-first, zero backend	npm
🎮	Forge	Factory builder playable in browser — own codebase inspired by Factorio, 50+ commits of original systems	npm
📚	TeleWiedza	PL/EN telecom encyclopedia — networking, 5G, fiber, security	docs

📦 Distribution — everything ships, nothing rots

flowchart LR
    T["git tag"] --> CI["GitHub Actions"]
    CI --> D["Docker multi-stage"]
    D --> G["GHCR: signed images"]
    CI --> B["cargo release build"]
    B --> R["Release + binaries"]
    CI --> P["Registry publish"]
    P --> C["crates.io: 7 crates"]
    P --> Y["PyPI: 2 packages"]
    P --> N["npm: 6 packages"]

🐳 GHCR images	🦀 crates.io	🐍 PyPI	🟢 npm	📦 Public repos
signed & live	7	2	6	24 (21 own)

🕹️ Interactive — a recruiter can actually run this


▶ Externum Playground	The programming language running 100% in your browser (Pyodide). Write programs, hot-load your own modules into the live runtime, compile to Python/Bash/binary. Sessions shareable by URL.
🧬 `/define`	Comment on an issue → the bot validates your module against Externum's type checker → opens a PR into the stdlib → once merged, `import` works for everyone including the web playground. The language evolves from comments.
🎮 `/run`	Comment on cybersec-tools → the bot builds the workspace in CI and executes the real binaries with sandboxed guardrails, posting output back.
🔏 `./verify.sh v0.4.5`	One command verifies SLSA provenance + Sigstore signatures + SBOM of any release. No trust required.

⚡ One-command install — like real CLI tools

# macOS (Apple Silicon & Intel)
brew tap bartoszosiej/tap https://github.com/BartoszOsiej/homebrew-tap
brew install bartoszosiej/tap/netrecon bartoszosiej/tap/hashsleuth

# Windows
scoop bucket add bartoszosiej https://github.com/BartoszOsiej/scoop-bucket
scoop install netrecon hashsleuth

Formulas & manifests are re-synced hourly by a bot with fresh SHA-256 sums — never stale.

🖥️ Build matrix — 5 platforms per release

Linux x86_64	Linux arm64	macOS arm64	macOS x86_64	Windows x64
✅	✅	✅	✅	✅

🔐 Signed supply chain

The same pipeline discipline big tech uses — cryptographically verifiable, not "trust me".

Layer	What it means
cosign keyless signing	Every GHCR image is signed via Sigstore/Fulcio OIDC — no keys to leak, identity bound to the GitHub workflow
SLSA v1 provenance	Every release binary carries a build attestation proving which commit, which runner, which pipeline produced it
SPDX SBOM	Every release ships a machine-readable software bill of materials

Verify it yourself — no trust required:

# verify a container image signature
cosign verify ghcr.io/bartoszosiej/cybersec-tools \
  --certificate-identity-regexp "^https://github.com/BartoszOsiej/" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

# verify binary build provenance
gh attestation verify netrecon-x86_64-unknown-linux-gnu \
  -R BartoszOsiej/CyberForge

🗂️ Full package index

npm

crates.io

PyPI

🛡️ Engineering discipline

Note

Every repository runs the same production-grade pipeline — this is how I work, not how I pretend to work.

Practice	Coverage
CodeQL security scanning	✅ every active repo
Dependabot + vulnerability alerts	✅ every active repo
Branch protection + squash-merge history	✅ every active repo
Public sprint boards + milestones	✅ 6 boards
Discussions, CONTRIBUTING, SECURITY, CoC	✅ every active repo
MIT licensing, topics, descriptions	✅ every active repo

📊 Live Package Metrics

Self-hosted stats engine — a scheduled workflow queries npm / PyPI / crates.io / GitHub releases and renders these cards from scratch. No badge services, no third-party renderers: every pixel comes from my own pipeline.

📈 GitHub Stats

🗺️ Timeline

2021 ──► first lines of code — Java, CryEngine, Minecraft mechanics (@ghost0development)
2025 ──► networking & security track (teleinformatyka)
2026 Q1 ──► Rust deep dive: voxel engine, eBPF kernel probes, compiler from scratch
2026 Q2 ──► production CI/CD: Actions → GHCR → crates.io / PyPI / npm, 14 packages live
2026 Q3 ──► ecosystem upgrade: aya 0.14, ureq 3, ml-kem 0.3, dashmap 6, RISC-V bare-metal (Fortis)
2026 Q4 ──► upstream PRs to aya-rs merged, first paid role 🎯

🤝 Upstream Contributions

Target	PR type	Status
aya-rs/book	Fix outdated `offset_of!` tip in Parsing Packets page (issue #202)	PR open
aya-rs/book	Add typos spellcheck CI (issue #91)	PR open
aya-rs/book	Update deprecated `aya::Bpf` references + MAP API note (issue #73)	PR open

All PRs based on real-world experience upgrading talus-process-monitor to aya 0.14.

🌐 Also here

ghost0development — my original account, building since Feb 2021: 32 repos of early experiments, game prototypes and the original halcyon-process-monitor (ancestor of Talus). Everything archived there is preserved as history — active development happens on this account.

🗂️ Where the ideas came from (archive → production)

Archive — @ghost0development (2021–2025)	Production — @BartoszOsiej (2026–)
`halcyon-process-monitor` — first eBPF probe	Talus — eBPF endpoint security, on crates.io
`NV-2.0` / `NV2_ENGINE` — voxel prototypes	NV2_ENGINE — VIVIA engine, on crates.io
`Factorio-web-game` / `Factorio-pt` — game experiments	Forge — factory builder on npm
`FastAPI-url` — first FastAPI service	Shortlink — on PyPI as `fastapi-url`

Open to work — mmc29213@gmail.com

PRODUCTS — Talus Enterprise Pack · $50 (eBPF ransomware EDR: deployment guide + support) · Externum Pro Pack · $29 (production guide for the language) · Support Session · $150 (60-min deploy call + written config) — code always MIT & free

Navigation Menu