I'm a JDK author and security researcher from Manchester, United Kingdom. My OpenJDK work is mainly around HotSpot, with a particular interest in JIT compilation and garbage collection. I like the parts of the JVM where profiling, generated code, runtime behaviour, and memory management all meet.

Outside the JDK, I'm interested in reverse engineering, obfuscation, compilers, bytecode tooling, and low-level systems. My security research has included work around the Windows kernel and CVE-2026-58532, an integer overflow I found in tcpip.sys. I also write about JVM internals, security, and reverse engineering.