Research
I do research. And when I find something worth sharing, I publish it.
I do not promise papers every month. I publish when I have something real to say.
Research
2026
A new format for describing APIs, built for LLMs. It uses 85.5% fewer tokens than OpenAPI YAML and 88.6% fewer than OpenAPI JSON, tested on GitHub, Twilio and DigitalOcean APIs.
Read the paper →
Research
2026
DoS attack that needs very little bandwidth, against HTTP APIs that accept JSON bodies. The attacker opens an HTTP/1.1 chunked connection and drips a valid JSON prefix at one byte per second, never sending the closing token. 90% of 41 evaluated targets are vulnerable under default configuration.
Read the paper →