Skip to content
View iderex's full-sized avatar
🤯
Torturing AI with doctor handwriting since 2017 — still no cure
🤯
Torturing AI with doctor handwriting since 2017 — still no cure
7 followers · 8 following

Achievements

Achievement: Pull Sharkx3Achievement: QuickdrawAchievement: Pair Extraordinairex3Achievement: YOLO

Achievements

Achievement: Pull Sharkx3Achievement: QuickdrawAchievement: Pair Extraordinairex3Achievement: YOLO

Highlights

  • Pro

Block or report iderex

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
iderex/README.md
Nils Lehnen — security-first systems programming

Hi, I'm Iderex 👋

IT-security specialist for critical healthcare infrastructure (and KMU) since 2017.
I build fail-closed, auditable, self-hosted software - from GPU kernels to the Linux kernel.

focus: security-first self-hosted, privacy by default since 2017

About me

I'm a systems programmer who cares about the boring, load-bearing things: fail-closed defaults, tamper-evident audit trails, and software that never leaves your network. My day job is keeping critical healthcare infrastructure, and the small businesses nobody else looks after, secure.

I like a problem that forces me down to the metal: a decompressor that has to be correct and fuzz-proof, a simulation squeezed into hand-written SIMD, an auth plugin that fails safe, a kernel driver that behaves. Different languages, same obsession — make illegal states unrepresentable, then prove it.

  • 🧰 Comfortable across C, C++/CUDA, C#, Rust, and x64 assembly.
  • 🏥 Focused on self-hosted, single-tenant tools.
  • 🐧 Occasional Linux kernel contributor.

What I'm building

🗜️ cudec

C++ · CUDA

Auditable, fail-closed, fuzz-tested GPU decompression in CUDA C++. LZ4 batch-decoded on NVIDIA GPUs today; Snappy, GDeflate and Zstd planned.

🔐 jellyfin-plugin-sso

C# · .NET 9

Single sign-on for Jellyfin via OpenID Connect & SAML 2.0 — a security-first revival of the archived 9p4/jellyfin-plugin-sso, updated for Jellyfin 10.11.

🐜 swarm.asm

x64 Assembly · AVX2

A Particle Life engine written entirely in hand-written x64 assembly. Goal: 1,000,000 particles at 60 fps — no GPU, no dependencies, one small exe.

🐧 linux

C

My working tree for Linux kernel development and upstream contributions.

Toolbox

Rust C C++ CUDA C# Assembly Linux Docker SQLite

☕ Sponsor

If something I built saved you time, made your setup a little safer, or was just fun to read, you can buy me a coffee. It keeps the late-night, low-level side projects going. No pressure, always appreciated. 💛

Buy Me a Coffee

Every coffee goes toward more auditable, self-hosted, fail-closed open source. Thank you. 🙏

Pinned Loading

  1. cudec cudec Public

    Auditable, fail-closed, fuzz-tested GPU decompression in CUDA C++ — LZ4 batch-decoded on NVIDIA GPUs today; Snappy, GDeflate, and Zstd planned.

    C++ 1

  2. jellyfin-plugin-sso jellyfin-plugin-sso Public

    Single sign-on for Jellyfin via OpenID Connect & SAML 2.0 — a security-first revival of the archived 9p4/jellyfin-plugin-sso, updated for Jellyfin 10.11 / .NET 9.

    C# 5

  3. swarm.asm swarm.asm Public

    A Particle Life engine written entirely in hand-written x64 assembly. Goal: 1,000,000 particles at 60 fps - no GPU, no dependencies, one small exe.

    C# 1

  4. linux linux Public

    Forked from torvalds/linux

    Linux kernel source tree

    C