Skip to content
View simonmorley's full-sized avatar
23 followers · 10 following

Achievements

Achievement: Pair Extraordinairex3Achievement: QuickdrawAchievement: YOLOAchievement: Mars 2020 ContributorAchievement: Arctic Code Vault ContributorAchievement: StarstruckAchievement: Pull Sharkx3

Achievements

Achievement: Pair Extraordinairex3Achievement: QuickdrawAchievement: YOLOAchievement: Mars 2020 ContributorAchievement: Arctic Code Vault ContributorAchievement: StarstruckAchievement: Pull Sharkx3

Highlights

Organizations

@cucumber-tony @pgdn-oss @NullRabbitLabs

Block or report simonmorley

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
simonmorley/README.md

I work on infrastructure security failure modes in validator and node systems.

Recent work focuses on host-level exposure that is invisible at the protocol layer, and on testing whether inline, kernel-level enforcement is feasible in practice.

Contact: simon.morley@mac.com

            ┌─────────────────────────┐
            │     Protocol Layer      │
            │ (Consensus / RPC / API) │
            └────────────▲────────────┘
                         │
            ┌────────────┴────────────┐
            │   What tooling sees     │
            │  (agents, dashboards)   │
            └────────────▲────────────┘
                         │   ← blind spot
    ┌────────────────────┴────────────────────┐
    │        Host / Kernel Boundary           │
    │   (OS, networking, packet handling)     │
    │      XDP / eBPF / inline paths          │
    └────────────▲───────────────▲────────────┘
                 │               │
          attacker surface   enforcement point

Pinned Loading

  1. NullRabbitLabs/nr-ibsr NullRabbitLabs/nr-ibsr Public

    Shadow-mode XDP/eBPF traffic collector that records what would have been blocked — without blocking anything. The rehearsal layer for earned autonomy.

    Rust 2

  2. NullRabbitLabs/ferret NullRabbitLabs/ferret Public

    LLM-powered OSINT agent that discovers validator infrastructure beyond on-chain data. Sui, Solana, and more.

    Python 4

  3. NullRabbitLabs/limpet-trs NullRabbitLabs/limpet-trs Public

    High-precision network scanner with eBPF/XDP kernel-bypass timing. SYN scanning with nanosecond RTT resolution.

    Rust 2

  4. NullRabbitLabs/minerva-hdn NullRabbitLabs/minerva-hdn Public

    Honeypot detection from TCP timing samples. Statistical fingerprinting to distinguish real services from emulators like Cowrie and Dionaea.

    Python 2

  5. NullRabbitLabs/nr-bundle-spec NullRabbitLabs/nr-bundle-spec Public

    Bundle v1 — canonical multi-modal capture format for adversarial blockchain validator research. JSON Schema + Python + Rust reference parsers + 5 example bundles. MIT.

    Python

  6. NullRabbitLabs/nr-substrate-paper NullRabbitLabs/nr-substrate-paper Public

    Iterative leak-surface peeling — a falsifiability-anchored methodology for ML detection of blockchain validator infrastructure attacks. Working draft; v1 ships when arXiv submission lands.

    TeX