Research

Papers

I do research. And when I find something worth sharing, I publish it.

I do not promise papers every month. I publish when I have something real to say.

Research

LAPIS: Lightweight API Specification for Intelligent Systems

arXiv · 2026

A new format for describing APIs, built for LLMs. It uses 85.5% fewer tokens than OpenAPI YAML and 88.6% fewer than OpenAPI JSON, tested on GitHub, Twilio and DigitalOcean APIs.

Research

Slow JSON Stream: A Low-Bandwidth Denial-of-Service Attack Against HTTP APIs with JSON Request Bodies

2026

DoS attack that needs very little bandwidth, against HTTP APIs that accept JSON bodies. The attacker opens an HTTP/1.1 chunked connection and drips a valid JSON prefix at one byte per second, never sending the closing token. 90% of 41 evaluated targets are vulnerable under default configuration.