Haruka Kaya賀屋 悠

Follow me on X@HarukaKayaDev

focus

  • Web2 Security
  • Web3 Security
  • OSS Security
  • Hardware Security
  • Electronics
  • PCB
  • Robotics
  • AI Agents
  • Drones
  • FPV
  • Audio
  • Camera
  • PC Building
  • Linux
  • Hackathons
  • CTF
  • Tech Gear
  • Networking
  • Servers
now
Hardware Security
ok
Photos of me OK · Posting on social OK · Dirty jokes OK
links

` opens a terminal

What I’ve done

  1. I found and reported a missing policy check in ImageMagick's ASE decoder that allowed excessive memory use. It was fixed in 7.1.2-35 and published as a security advisory (CVSS 5.3, medium).

    • Vulnerability Research
    • Open Source
    • CWE-400
  2. To learn laser fault injection, briefly glitching a chip with a laser, I have been building a research rig based on the open-source RayV Lite: sourcing parts, 3D printing and aligning the optics, and re-fitting the design to measured parts.

    • Hardware Security
    • Laser Fault Injection
    • 3D Printing
    • Optics
  3. Fake Trezor Suite phishing2026

    I found a fake Trezor Suite phishing site and traced how it funneled victims through Google Sites, GCS and Vercel. To poison what the attackers collected, I generated large numbers of valid-format fake BIP-39 recovery phrases and submitted them over Tor, then filed abuse reports with each provider.

    • Phishing
    • Web3
    • Abuse Report
  4. I turned a Raspberry Pi Zero 2 W into a pocket Linux terminal driven from an iPad browser, exploring how to make a tiny machine genuinely useful and using it as a security learning tool.

    • Raspberry Pi
    • Kali Linux
    • Security
  5. AI Life Manager2025

    I have been running a personal AI assistant that I talk to over Discord. It handles my calendar, mail, tasks and notes across Google, Outlook and Obsidian, and sorts incoming mail automatically every day.

    • AI Agents
    • Automation
    • Daily Use
  6. Kodicil Recorder2026

    I have been designing a wearable 8-channel recorder end to end: PCB, firmware and enclosure. Recordings are tamper-evident, and I have also been experimenting with AI-driven PCB design automation.

    • PCB Design
    • Embedded
    • Tamper Evidence
  7. AI developer community events (Tokyo)2026

    I regularly attend AI developer community events in Tokyo, such as #AICatchup, #DevDayCommunity and #aimeetup.

    • Community
    • AI

Interests

  1. Drones
  2. Linux & Electronics
  3. Security & CTF
  4. Building with AI
  5. Radio
  6. Skiing & Rope Work

Gear

  • HackRF + PortaPack
  • Flipper Zero
  • Proxmark3 RDV4
  • 3D Printer
  • CNC
  • KiCad
  • Raspberry Pi