Fábio Maia

Fábio Maia

Experience

Freelance

  • Reverse engineered Android applications using apktool, Ghidra, and mitmproxy - delivering documentation and integration code that enabled a client's automation workflow.
  • Research device recall as implemented by Google Play Integrity. Report identifiers that survive factory reset which can be used to detect devices operating in automation clusters.

Lead Reverse Engineer @ Bliq / Remote

  • Led a 3-person embedded security team, setting research direction in reverse engineering 3rd party applications depending heavily on Google Play Services. Review & contribute to security research efforts in AOSP, Linux and TrustZone. that enabled core business automation workflows.
  • Reverse engineered Android userland components (C/C++, Init, Bionic, Zygote, SELinux), OEM Android kernels, LK bootloaders, USB-C flashing flows, and TrustZone firmware to unblock automation workflows on more than 10 undocumented mobile platforms (Xiaomi, Samsung).
  • Built repeatable analysis and bring-up workflows across Linux kernel (Kbuild, syscall hooking, init), AOSP build systems (Soong, repo manifests), and firmware (LK, TrustZone). Deploy more than 100 custom AOSP versions in a cluster of networked Android devices.

Reverse Engineer @ Bliq / Berlin

  • Black-box reverse engineering of 10+ Android applications that build heavily on Google Play Services and private HTTP APIs. Build tools to support Android emulation and automation testing on the bleeding edge of application version.
  • Performed TLS MITM analysis on Android applications using OpenSSL/Python, CryptoTLS/Go. Administered GNU/Linux servers using systemd, iptables, coreutils, and POSIX shell tooling.
  • Built low latency computer vision tooling with FFMPEG, PyTorch, OpenCV, and Flutter.

Education

Free Electives @ University of Aveiro

  • Trusted Execution Environments (Arm TrustZone, Intel SGX)
  • Semiconductors Fundamentals.
  • System-on-Chip Embedded Systems.

MSc Computer Engineering @ University of Aveiro

  • MIPS CPU microarchitecture, GPU CUDA programming model, SoC co-design (VHDL, C/C++).
  • MSc thesis on CNN transfer learning (Keras TensorFlow, VGG16, Inception, and ResNet).

BSc Computer Engineering @ University of Aveiro

  • Digital hardware design in VHDL, FPGA, Altera, and Xilinx.
  • Embedded systems, OS design, Linux userspace programming, and Linux filesystems.
  • MIPS CPU architecture, MIPS assembly, C/C++, and Java.

Projects

  • GitShaman.com — Semantic code exploration for navigating large systems codebases. Went viral on LinkedIn and Hacker News. Still serving 5000 unique visitors per month!
  • BrainSpeed.ai — Train your brain with games, therapies, biohacking protocols.
  • Baecation.love — Find romantic getaways with bae.
  • OpenCycling.org — Open platform for indoor biking with Bluetooth-capable bike trainers