👋 Hey there! I'm Michael (aka IntegralPilot)

I'm passionate about low-level systems, security research, and compiler design.

🎯 TL;DR - I build operating systems, compilers, and CPUs from scratch. I've discovered multiple security vulnerabilities in Apple platforms, including kernel memory disclosures (CVE-2025-43361) and remote 0-click vectors (CVE-2025-43539). I also wrote a compiler to bring Rust to the JVM, contributed code that powers Wikipedia's backend, and shipped production apps with Flutter and TypeScript.

🛡️ Security Research & Disclosures

I contribute to security through responsible disclosure.

| CVE ID | Component | Vulnerability Detail | References | CVSS | :--- | :--- | :--- | :--- | :--- | | CVE-2025-43361 | Apple Audio Subsystem | Kernel Memory Disclosure. A malicious sandboxed app could read kernel memory via an out-of-bounds read.
CVSS 7.8 (High). | Vendor (iOS)
CVE.org | 7.8 (HIGH) | CVE-2025-43539 | AppleJPEG
JPEG XL (JXL) | Memory Corruption in AppleJPEG, specifically affecting JPEG XL (JXL) parsing.
0-click remote vector (e.g. via iMessage). | Vendor (iOS)
CVE.org | 8.8 (HIGH) | CVE-2025-43482 | Apple CoreAudio
coreaudiod | Denial of Service. Improper input validation allowing a malicious app to crash the system audio daemon.
Co-credited with Jex Amro. | Vendor (macOS)
CVE.org | 5.5 (MEDIUM)

👨‍💻 About Me

• 🇦🇺 High school sophmore (Year 10) based in Australia
• 🧠 Deep interest in systems programming, hardware design, and applied security
• 🧬 Exploring computational neuroscience and bioinformatics
• ⚡ I love building things that are fast, safe, and deeply understood

🚀 Featured Projects

Here are a few projects I'm especially proud of - spanning operating systems, compiler internals, hardware, and computational science.

| Project | Description | Key Technologies | | ---------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------- | | ☕ rustc_codegen_jvm | Custom Rust compiler backend targeting JVM bytecode. Compile Rust to a .jar to run on any JVM.
- Supports: Control flow, ADTs, generics, closures, traits, dynamic dispatch, etc.
- Tooling: Includes a custom Python-based build/test system and seamless Java interop. | Rust, Compilers, JVM | | 🦀 WasmOS | Experimental x86_64 unikernel OS in Rust, designed from scratch to run WebAssembly-based userspace apps.
- Supports: Rust, C, C++ and AssemblyScript userspace programs compiled to WASM.
- Features: Custom libc/libstd++ and ABI design, and VFS/inode system. | Rust, WASM, x86_64 | | ⚡ GammaCPU | A 32-bit, stack-based CPU in VHDL executing a subset of the WASM instruction set, including a custom stack and ALU component, and integration and unit testing system. (Built with @aellul27.) | VHDL, WASM, Hardware | | 🧠 DynamicSNN | C++ simulator for biologically plausible learning in Spiking Neural Networks, modeling synergy in plasticity mechanisms. Features modern C++17 design principles including smart pointers and CMake, and easy to use Python wrapper API. | C++, Neuroscience, Python |

🌍 Open Source Contributions

I actively contribute to open source, including the Wikimedia Foundation’s MediaWiki platform - my code is live on Wikipedia.

| Project | Contribution Summary | Links | | ------------------ | ---------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | | MediaWiki – Nuke (merged & deployed) | ✨ Filtering by min/max page size in Special:Nuke, with UI, backend logic, and validation.
🔍 Introduced non-fatal validation messages. | Change 1116491
T378488 | | MediaWiki – Nuke (merged & deployed) | 🔓 Allowed non-admins to list pages in Special:Nuke, improving usability for patrollers.
🛑 Permission-aware UI and i18n. | Change 1116493
T376378 | | MediaWiki – AbuseFilter (merged - deployment on Jan 6) | 🕵️ Added support for suppressing filters containing PII.
👥 UI/API access restricted to oversighters. | Change 1115319
T290324 |

📱 Apps

Outside of systems work, I build applications that solve real-world problems - especially in education, accessibility, and healthcare.

| App Name | Description | Tech Stack | Links | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ | | 🎵 MelodyRex | Built a music practice companion for students/teachers, built in 8th grade. Still in use at my school. | TypeScript, Vite, Firebase, Swift | Website, App Store | | 🧬 ClarityScreen | Designed a concept app with working backend for clear and accessible display of Alzheimer’s genetic test results. | Flutter, Dart, Firebase | Website | | 👁️ 4Sight | Created an AI-powered assistant for low vision. Describes surroundings, reads signs/maps, and answers camera-based queries using LLMs and custom CNNs. | Flutter, Dart, Azure, Google Gemini | Website, App Store |

💻 Languages

• Advanced: Rust, C++, Python, ARM Assembly (arm64, arm64e w/ PAC)
• Proficient: VHDL, C, x86_64 Assembly, Java, Kotlin, TypeScript, Flutter
• Learning: Lean (for mathematical proofs and formal verification)

🔧 Tools

• Systems & Low-Level: QEMU, LLDB, LLVM, Vivado, GHDL
• Security: Ghidra, Frida, Jackalope (fuzzer), TinyInst

🔭 Currently Working On

• Expanding rustc_codegen_jvm to support more of the Rust language.
• FPGA accelerator for cryogenic electron microscopy.
• Developing a Rust-based platform for XNU kext fuzzing in userspace.
• Learning Lean for formal verification.

📫 Get in Touch

• Email: linux479 [at] duck [dot] com
• Discord: dna_codon
• Reddit: u/IntegralPilot
• Twitter/X: @IntegralPilot
• Bluesky: @integralpilot.bsky.social