visitor@codestinger:~$ whoami
Spreading the Hacker Mindset
codestinger builds and shares software, tools and engineering knowledge across security, system integration, automation, cloud and embedded systems. Every solution is grounded in proven engineering principles and published openly for the wider engineering community. Meet the founder.
experience
cat about.md →- experience
- 10+ years designing, building and running production software
- industries
- pharmaceutical, veterinary, agricultural and beverage manufacturing
- regions
- Europe, the Americas and Asia-Pacific
- standards
- ISA-95, GS1 (GTIN, SSCC, EPCIS) and OWASP Top 10
- compliance
- HIPAA, SOC 2 and pharmaceutical serialization regulations across the EU, Russia, India, China and Brazil
- security
- Certified Ethical Hacker (CEH), trained in the OSCP penetration testing methodology
- appsec
- VAPT and reporting, web application security (Django, FastAPI, Flask), threat modelling, secure code review, SAST and DAST
- secrets
- encryption schemes and secrets management for backup and disaster recovery
- scale
- 1,000,000 PDF pages generated in about 25 minutes
- research
- 3 publications on robotics and embedded systems (IEEE, IJPRET)
- stack
- Python, Rust and C · Django, FastAPI, Flask, React · Linux
work
- security/hardening, encryption schemes, secrets management for disaster recovery and penetration testing (CEH)
- connectors/ERP, MES, WMS and serialization integrations with SAP and enterprise track-and-trace platforms, built to ISA-95 and GS1
- apps/web and desktop apps: Django, FastAPI, Flask, React, PySide6 and Rust with Tauri
- automation/VM provisioning, Pulumi, Ansible, CI/CD, Docker, Kubernetes, Nomad, Consul, Traefik and scripts that kill drudgery
- cloud/cloud-native apps and the platforms they run on
- data/data pipelines, IoT and smart-city sensor data, analytics and task queues
- compliance/HIPAA, SOC 2 and pharma serialization regulations, designed in rather than bolted on
- legacy/keeping long-lived systems secure, performant, compatible and working
- simulators/realistic industry simulators that test platforms before the real world does
- documents/Typst-powered PDF generation: one million pages in about 25 minutes
- hardware/device drivers, machine vision, sensor and PLC integration, microcontrollers, Arduino, Raspberry Pi and robotics
- architecture/domain-driven and event-driven products, designed, built, shipped and run
writing
ls ./blog →-
4m
devops-architecture
What pyramids, bridges and beavers teach software architects
Software architecture is a young discipline. Nature has been refining its structures for millions of years and engineers for thousands. What beavers, orcas,…
-
6m
devops-architecture
Architecture is a people job
The best architecture decisions I've made started with a conversation, not a diagram. How understanding deployers, solution designers, product owners, teams and clients…
-
9m
devops-architecture
What doing DevOps taught me about architecture
An architecture isn't finished when the diagram looks good. It's finished when a team can build, ship, observe, roll back and fix it at 3 a.m. Eight lessons from…
-
9m
automation
Simulate before you integrate
The hardest systems to test are the ones fed by the physical world. Why I build realistic simulators before connecting to real equipment and upstream systems. How to…
-
5m
information-security
Encrypting secrets at rest in Python with AES-GCM and Argon2
When a desktop tool or on-prem service has to store passwords and API keys locally, "base64 in a config file" isn't good enough. A small, versioned file format built on…
subscribe
Every new post and tool, straight to your feed reader. No account, no tracking, no inbox clutter.