carterlasalle.com · Security Engineering at Lila Sciences · @fl97inc
I’m a computer science student at Notre Dame ’29 who builds security-minded software close to real constraints: malformed packets, private messages, rolling-shutter cameras, terminal workflows, unreliable links, and human operators.
I care about small attack surfaces, explicit failure modes, and products that are as serious about tests and documentation as they are about the demo.
|
44,000+ downloads. A local-first Model Context Protocol server for reading, searching, and sending through macOS Messages. Message data stays on-device, databases open read-only, and attachments use deliberate progressive disclosure.
|
A safety-gated research and control stack for studying high-frequency stage-light modulation against rolling-shutter cameras. It spans simulation, signed edge schedules, fail-closed controls, an operator console, portable firmware, audit chains, and a 120-case device matrix.
|
|
A dependency-free packet-capture explorer that turns PCAP and PCAPNG files into answers from the terminal. Defensive protocol decoding, deterministic structured output, a compact filter language, randomized robustness tests, and cross-platform CI.
|
A polished Go CLI and interactive TUI for turning a codebase into useful, syntax-highlighted context. Distributed through Homebrew and native packages, with automated releases for macOS, Linux, and Windows.
|
|
A Rust screen-sharing system that transmits changed regions instead of blindly resending frames. Includes direct QUIC transport, relay-backed NAT traversal, adaptive quality, a native viewer, and zero-install browser viewing.
|
A production training PWA with guided sessions, analytics, expiring shares, and an optional authenticated AI coach. Authorization is enforced with PostgreSQL row-level security; server routes add origin, CSRF, size, and rate-limit controls.
|
untrusted input ──▶ narrow boundary ──▶ observable behavior ──▶ safe failure
- Local first when data is personal. A tool should not need a cloud round-trip just because one is convenient.
- Failures are product behavior. Corrupt captures, expired signatures, missing sensors, and dropped connections deserve designed outcomes.
- Shipping is part of engineering. Reproducible installs, CI, tests, release automation, runbooks, and threat models are not cleanup work.
EmojiStega hides data in Unicode variation selectors · System Information MCP gives coding agents structured local environment context · Conversation Predictor explores conversation paths with MCTS and language models · Ghost Typer studies realistic typing dynamics in a local browser extension
Currently exploring secure agent tooling, local-first integrations, network systems, and cyber-physical safety.