About

I'm Eduardo Kohn, a software engineer with more than ten years building full-stack systems — Java/Spring Boot and Elixir/Phoenix on the backend, React and TypeScript on the frontend, React Native on mobile, with PostgreSQL, Docker, and Kubernetes in production. I'm now in a deliberate transition from engineering practice toward applied research in cyber-physical systems (CPS) and industrial control systems (ICS/OT) security.

My approach is bottom-up. Before the security layer, I'm rebuilding rigorous foundations in computer networking — TCP/IP, routing, DNS, and the protocol internals that real systems actually depend on — working through Kurose & Ross and validating the theory against packet captures rather than taking it on faith. I've always been more interested in understanding why things work than in shipping features — from the bytes on the wire to the cryptography that secures a protocol.

Within security, the direction that most motivates me is Cyber-Physical Systems: the intersection of computing, networking, and physical processes that underlies critical infrastructure like power grids, industrial control systems, medical devices, IoT, and autonomous vehicles. When a vulnerability crosses from the digital into the physical, the consequences stop being abstract — and that technical responsibility is exactly what draws me in.

I'm an active contributor to the Erlang/Elixir ecosystem. I have four merged pull requests in the Phoenix framework — query-string encoding, code generation, installer crash handling, and documentation fixes, reviewed by core maintainers — along with open contributions to Cowboy and its supporting libraries, from TCP socket teardown to SWAR-based HTTP/1 parsing. Working on open source at that scale has been my main engineering school: it's where I've learned in practice what it takes to design concurrent, fault-tolerant systems on serious theoretical foundations — OTP, supervision trees, message passing.

This blog is where I think in public, writing as I work through each topic. Papers are longer pieces written with scientific rigour — abstracts, citations, theorems, proofs; my DNS study, from concept to packet, lives there. Posts are shorter notes that share an idea before it is finished enough to formalise.

Professionally, I've worked with frontend and cross-platform mobile (React Native, iOS and Android) since 2016 and as a full-stack engineer since 2021, across companies including EY, AB InBev, Leroy Merlin, and Capgemini. I'm pursuing a Bachelor's in Computer Science (Universidade São Judas Tadeu, 2024–2028) and, now based in Ohio, engaging with US-based researchers as I prepare to apply for doctoral work in applied security.

Find me on GitHub, LinkedIn, or subscribe to the newsletter to get new pieces by email.