I’m Kevin Pham.

I reverse engineer things, investigate security failures, and build things that tend to require an explanation.

Practice / background

My background spans malware analysis, vulnerability research, incident response, and AI engineering. I reverse engineered Android malware as a contractor on Google’s Android Security team, built and operated a production AI SOC at the Port of Long Beach, and built clinical AI systems at a healthcare startup.

The reverse engineering extends to hardware and automotive ECUs. Recent projects include putting Mario Kart on my truck’s dashboard, building an audio modem that plays Coltrane, and carrying TCP/IP through a Teams video call. Other investigations follow browser surveillance, undocumented traffic tiles, and the distribution of street-sweeping tickets across Los Angeles.

When something gets written up, the test conditions, measurements, and failed attempts stay in. Those are the parts I go looking for in other people's write-ups, so they stay in mine.

Everything published here is independent personal work and does not represent my employer.

Source code and active experiments live on GitHub at @deoxynet.