hi, i'm tuco.
member of the t9 collectivebeen poking at computers since i was 12 and somehow turned it into a thing. i write code, break things (not)on purpose, and spend way too long on setups, so i can larp with them. currently making stuff for corehub and causing problems with the t9 crew.(larp maxing). oh and im from germany
github stats
some repos on here were written with ai help. the code worked until it didn't. now i write my own slop again.
Loading...
pinned repositories
what i do
ai & ml
i trained a model on my own data once and it worked, which was exciting until i realized i had no idea why. mostly i build small automation tools and try to understand what's actually happening under the hood.
security
finding a hole before someone bad does feels good. web vulns, network stuff, occasional hardware tinkering. the finding is honestly more fun than the fixing, but i do both. (im really bad at this)
ctf & hacking
ctf is just puzzles except the puzzles are reversing a binary at 2am. decent at web and crypto, terrible at pwn, and fully in denial about it.
philosophy
linux
i run arch with (suckless) dwm. yes it took multiple reinstalls to get right. yes i still think it was worth it. my pc boots in 4 seconds (into grub) and i can name every process running on it, which feels like a superpower until something breaks at the worst possible moment.
free software
if you can't read the code, you don't know what it's doing. most proprietary software isn't evil, it just doesn't care about you specifically. open source at least gives you the chance to check.
self-hosting
i self-host what i can. because it's nice to know where your stuff actually lives. also it's a great excuse to run servers for no reason. (i use proxmox)
open source
i just love open source, cus yes
my setup
i've physically removed the camera and microphone from my main laptop, nuked the intel ME with me_cleaner, and own a dedicated router just for isolating test devices. is this overkill? maybe. is it interesting to figure out? absolutely.
daily driver is arch linux + dwm because i like being able to see the source code of my window manager. mullvad for vpn, vscodium because the telemetry in vscode bothers me more than it probably should.
hardware
thinkpad t480
main machine for security work. camera and mic physically removed — can't exfiltrate what isn't there. intel ME nuked with me_cleaner. nothing running that i didn't put there.
network
gl.inet beryl
keeps the test machine off my actual home network. all traffic goes through vpn at the hardware level — so even if something on the laptop misbehaves, it doesn't go anywhere useful.
system
tails os
boot from usb when i need a clean slate. everything goes through tor, nothing touches the disk. shut it down and it's like you were never there. i find that genuinely satisfying.
tech stack
projects
corehub
open-source collective. it's where a bunch of us dump the projects that are too small for a real repo and too good to just leave on a hard drive.
view projectnexusbd
dashboard for discord bots. built it because i kept forgetting what my bots were even doing. turns out other people had the same problem.
view on githubnexusng
ai assistant i built when i wanted to understand how the pieces actually fit together. mostly an excuse to read papers and break things in a controlled environment.
view on githubsignalvoid
hardware project for wireless analysis. the surge is a portable device built around rp2040 + esp32 with sub-ghz and nfc. it actually works, which surprised me more than it should have.
view projectmy domains
t9.rocks (student pack)
got this via the student pack. i lend it to the t9 crew. they trust me with their dns, which is brave.
t9.software (student pack)
also a student pack domain i lend to t9. honestly surprised they trust me not to redirect everything to a rickroll.
tucot9.com
you are here. obviously. unless you're reading the source code.
corehub.lol
the .lol TLD was cheap and we thought it was funny. it hosts our serious projects.
nexusng.site (expired)
expired because i'm broke. please don't steal it, wait until my pockets are full again. have mercy.