I spent fourteen years in national security — first as a U.S. Navy cyber operator, then as an all-source analyst and security engineer inside the intelligence community. These days I do that work somewhere new, and I spend my off hours building the things below.

Most of them start the same way: a question I can't put down. How much of my movement is a license plate reader actually recording? Could you forecast a war honestly enough to be scored on it afterward? Why has nobody assembled a clean, open dataset of every Supreme Court vote ever cast? Four have grown into archived, citable research. Most are just me following my curiosity in public. You're welcome to any of it.

Surveillance is much easier to argue about than it is to see. These are attempts to make it legible to ordinary people, and then get out of the way.

• TRAMES — navigation that routes you around automated license plate readers. An OsmAnd client, a GraphHopper backend, and the exposure study that convinced me it was worth building.
• OVERWATCH · overwatch.netslum.io — passive surveillance detection for Android. It fuses BLE and WiFi scans with the DeFlock ALPR map and live community feeds to flag Flock cameras, Axon body cams, and police presence nearby.
• VIGIL · vigil.netslum.io — counter-tracking over time. Detects AirTags, Tiles, SmartTags, and Find My devices that keep showing up wherever you go. Everything stays on your phone.

Half of any research project turns out to be discovering that the data you assumed existed was never actually assembled. So I assemble it, then give it away.

• JUDGMENT · judgment.karazajac.io — every U.S. Supreme Court judgment from 1791 to 2024. 29,000 cases and 256,000 justice votes, as browsable YAML, with an ETL pipeline and a forecasting roadmap.
  
• AUSPEX · auspex.blackflagintel.com — a doctrine-tagged corpus of state-sponsored cyber operations, built so that every claim traces back to a verified source.
  
• TOCSIN · tocsin.karazajac.io — conflict forecasting built on UCDP reference-class base rates, with self-resolving questions and calibration scoring against the prior. It keeps me honest.
  
• SUCCURRO · succurro.org — a hyper-local dataset of US help and support services: recovery meetings, shelters, food banks, veteran and LGBTQ+ services, crisis lines. Resolved down to the city, because "somewhere in your state" helps nobody at 2am.
  

• KAT — the Keyfob Analysis Toolkit. RF protocol analysis for automotive security research, and the project that taught me most of what I know about radio.
• SKELETONKEY · skeletonkey.netslum.io — a curated corpus of Linux privilege-escalation techniques, 28 modules spanning 2016 to 2026. Every one ships with detection rules, because the defensive half is the point.

An old protocol I'm fond of, rebuilt a few different ways.

• rvIRC — a terminal client with vim-style modal editing, in Rust.
• switchboard — a modern client with a Discord-shaped interface and full IRCv3 support.
• rIRCd — the server side, chasing the bleeding edge of the spec.

• HALCYON · halcyon.netslum.io — box breathing for Android. One tap to start, zero permissions, no accounts, nothing to sign up for. The animation is the whole app. I made it for myself and left it out where anyone can find it.

I like hearing from people — about the projects, about something you're building, or about a dataset you wish existed.

Email · kara@soulstone.org
Signal · kara.01
Blog · karazajac.io

_{Opinions are my own.}