01live
CanvasGLSL
a Fabric mod that replaces Minecraft menu backgrounds with custom GLSL shaders. it includes an in-game IDE, syntax highlighting, Shadertoy-compatible uniforms, live compile, and a file manager.GLSLFabricMinecraft
00independent work from Thailand
I find the seam where systems come apart.
I'm tinywifi—a student working across security research, computer vision, and small tools built around problems I actually have.01selected work
Built because something was missing.
02live
OpenMU
an unofficial, student-built Mahidol companion that brings Digital ID, classes, timetable, transcript, events, alerts, and campus services into one installable web app.Next.jsAstryxPWA
03live
BTS Tracker
a real-time Bangkok BTS companion with live arrival countdowns, journey planning, fares, station maps, and accessibility details—packaged as a fast installable PWA.TypeScriptBunPWA
OTHER EXPERIMENTS
- helium-syncWindowsbidirectional bookmark and saved-tab sync across Windows machines, using a private git repository as transport.live
- grain-clfa YOLOv11 pipeline that grades corn seed quality from one image against practical defect and USDA damage classes.abandoned
- agri-routecold-chain logistics for Thai agricultural supply chains, with route optimization that batches multi-farmer shipments.abandoned
- voice-ai companionThai voice interaction for elderly care: medication reminders, emotional support, and emergency alerting.abandoned
02live desk
What is moving now.
live signals
- checking live signals
GitHub activity
profile- fix(marketplace): label plugin API accuratelyWNotch · 0433341 · codex/agentstats-permissionsOct 3
- Add MIT licenseWNotch-AgentStats · 4ca7578 · mainOct 2
- feat: mask account emails in privacy modeWNotch-AgentStats · d535fe9 · mainOct 2
- Fix release build boundaryWNotch-AgentStats · 87f6b38 · mainOct 2
- docs: clarify minimum WNotch versionWNotch-AgentStats · cd7dc06 · mainOct 3
03field notes
Notes from where assumptions fail.
- 01authorization without a principalan authorized review of a multi-tenant education platform where tenant IDs, unsigned cookies, and unauthenticated service APIs were treated as identity. the result was cross-tenant data exposure, exam-integrity failures, and a potential physical-safety risk.
- 02corn kernel gradinga technical writeup on building a computer-vision pipeline for grading corn kernels by damage type, size consistency, and quality thresholds.
- 03red-team observationsa short field note on the same broken trust boundaries that keep showing up in real systems: weak reset flows, bad CORS, exposed admin panels, and callback bugs.
- 04school management auth bypassunauthenticated account takeover on a platform serving international schools. forgot-password endpoint returns the reset token directly in the http response body — four requests, zero prior access, complete staff admin takeover. bonus: open redirect via unvalidated callbackUrl and potential ssrf vector.
04contact
Bring a strange bug or a useful idea.
Open to collaborations, responsible-disclosure conversations, bug-hunting tips, or just a chat.FRIENDS & BUTTONS
