I'm Taki Sadik. I build things to understand how they break: open-source defence hardware built against real Canadian requirements, a zero-trust homelab, a bare-metal Kubernetes cluster, a language model trained from scratch, and tools people use every day. Every project is open, documented and honest about what works and what doesn't yet.
I don't fully trust a system until I've tried to break it myself.
Chrome on phones can't run ad blockers, so I built a way around it: about 400,000 ad and tracker domains blocked on-device, in Chrome and every other app.
|
Canadian Defence Hardware Program 23 open-source sensor, robotics and security builds, each one built against a real, published Canadian defence requirement.
|
Canada's Defence Drone Initiative, the Army's MINERVA challenges and DRDC field trials say in public exactly what they want built. I read them as requirement specs and build against them at hobby scale, with real hardware, simulations that run on open data, and results published only when they're real.
Thermal Search-and-Rescue DroneFinds people in snow and brush with a FLIR Lepton and on-board Hailo AI. |
Passive Aerial Early-Warning NodeReceive-only KrakenSDR passive radar, scored against ADS-B ground truth. |
GPS-Denied Navigation RoverA ROS 2 rover that keeps navigating after GPS is cut, with an EKF over LiDAR, IMU and odometry. |
Multi-Domain Common Operating PictureOne live picture fusing every air, water and ground sensor, with signed detections. |
All 23 builds
| Domain | Build | What it does | Stage |
|---|---|---|---|
| Sky | Passive Aerial Early-Warning Node | Receive-only passive radar that sees aircraft by their broadcast reflections | In progress |
| Sky | Passive Acoustic Drone Detector | A microphone array that hears drone rotors and points to where they are | In progress |
| Sky | Thermal Search-and-Rescue Drone | A thermal drone that finds people in snow and brush with on-board AI | Built |
| Sky | Mini Airspace Deconfliction Manager | Who is flying where: geofences, conflict prediction and human override | In progress |
| Sky | Counter-Drone Sensor Fusion Simulator | Simulated radar, RF, acoustic and camera tracks fused into one triaged picture | Simulation |
| Sky | Counter-Drone Test and Scoring Harness | Scenario cards and honest metrics for scoring counter-drone sensors | Planned 2027 |
| Sky | Arctic ISR Drone | A cold-weather thermal drone with glove controls and TAK markers | Planned 2027 |
| Sky | LENTUS Disaster Response Drone Mapping | Simulated drone flights that map floods and wildfires for responders | Simulation |
| Water | Passive Acoustic Vessel Monitor | A dock hydrophone that identifies passing boats by their sound | In progress |
| Water | Autonomous Seabed Survey Boat | An autonomous boat that maps the seabed and flags anomalies | Planned 2027 |
| Ground | Seismic & Acoustic Perimeter Mesh | Solar LoRa sensor nodes that tell vehicles from footsteps | In progress |
| Ground | GPS-Denied Navigation Rover | A ROS 2 rover that keeps navigating after GPS is cut | In progress |
| Ground | Convoy Robots on a Degraded Mesh | Convoy robots that hold formation through radio link drops | In progress |
| Ground | GPS-Denied Cargo UGV for Snow | A cargo rover for snow that navigates without GPS | Planned 2027 |
| Ground | Cold-Soak Battery Rig | How drone batteries really behave in a Canadian winter, measured | In progress |
| Fusion | Multi-Domain Common Operating Picture | One live picture fusing every air, water and ground sensor | In progress |
| Fusion | Arctic Domain Awareness Digital Twin | A digital twin of Canada's North that flags dark vessels | Simulation |
| Trust | Decision Black Box | A tamper-evident flight recorder for human decisions | Simulation |
| Trust | Secure Robot-Fleet Updates | Signed over-the-air updates with automatic rollback for robots | In progress |
| Trust | Secure Fleet Autonomy | Hardening a robot and drone fleet against spoofing and tampering | Planned 2027 |
| Trust | DDIL-Proof DevOps | CI/CD that keeps shipping over denied and broken networks | Simulation |
| Trust | Zero-Trust Air-Gapped Supply Chain | Signed, reproducible software carried across an air gap | Simulation |
| Trust | Sovereign AI and Data Enclave | A private AI enclave where every answer respects clearance labels | Planned 2027 |
| Project | What it is | Stack |
|---|---|---|
| 7-Node Bare-Metal Kubernetes Cluster | Production K8s on 3 desktops and 4 laptops: VLAN-segmented networking, NetworkPolicy, MetalLB, 3x-replicated Longhorn storage, full observability | Kubernetes, Calico, MetalLB, Longhorn, Prometheus, Grafana |
| Proxmox VE Zero-Trust Private Cloud | 3-node HA cluster on Ceph, four trust-tiered VLANs, zero public ingress via Cloudflare Tunnel with Tailscale fallback | Proxmox VE, Ceph, Cloudflare Tunnel, Tailscale, ZFS |
| TYF-AI: Local AI Security Platform | Hardened llama.cpp and CUDA inference behind authenticated Caddy, per-model Firejail sandboxing, pinned weights; 50+ concurrent queries under 2 s | llama.cpp, CUDA, Caddy, Firejail |
| Chakor: Self-Hosted AI Workspace | MIT-licensed Next.js workspace for local models or your own keys: in-app GGUF downloads, web search, doc chat, blind A/B compare, no telemetry | Next.js 15, TypeScript, SQLite, Ollama |
| Chakor: Custom 7B LLM from Scratch | ~7B decoder-only transformer hand-built in PyTorch (RoPE, RMSNorm), pretrained on 100B+ tokens via DDP, served 24/7 as GGUF | PyTorch, DDP, GGUF |
| Data Sovereignty & Media Stack | Nextcloud and Immich replacing Drive and Photos, with 3-2-1 backup to BorgBase and rsync.net and zero data-loss events | Nextcloud, Immich, BTRFS, BorgBase |
| Project | What it is | Stack |
|---|---|---|
| OSINT Recon Dashboard | FastAPI dashboard wrapping 22 security and recon tools with SQLite storage | Python, FastAPI, SQLite |
| Automated SOC Pipeline | Wazuh detections into TheHive with MISP enrichment, MITRE ATT&CK-tagged rules and automated active response | Wazuh, TheHive, Cortex, MISP |
| Active Directory Threat Hunting Lab | AD forest instrumented with Sysmon and Splunk; hunted Kerberoasting, PtH and Golden Ticket; PtH detected in 2 minutes | BloodHound, Sysmon, Splunk |
| Cloud Security Posture Management | CIS-benchmark audits of AWS and Azure with Prowler and ScoutSuite | AWS, Azure, Prowler, ScoutSuite |
Self-hosted services
| Service | Stack | Endpoint |
|---|---|---|
| Private Search | SearXNG meta-search, no tracking | search.tyfsadik.org |
| Cloud Storage | Nextcloud, MariaDB, Docker | cloud.tyfsadik.org |
| Photo Management | Immich, PostgreSQL, ML face recognition | photo.tyfsadik.org |
| Wiki Mirror | Kiwix, full Wikipedia mirror | wiki.tyfsadik.org |
| DNS | Pi-hole and Unbound, recursive resolution | Internal |
| Postfix, Dovecot and DKIM | @tyfsadik.org |
|
| OSINT Dashboard | FastAPI with 22 security tools | osint.tyfsadik.org |
| Remote Desktop | Arch Linux and XFCE via WSL2, no port forwarding | Private |
| Project | What it is | Stack |
|---|---|---|
| GateArch | Student portal and course-management system with full CRUD and authentication | PHP, MySQL |
| TaxGlobe | Multi-jurisdiction tax calculator with real-time federal and provincial breakdowns | JavaScript |
| Wonder Learning | E-learning platform with course listings and embedded video | JavaScript |
| Depot Gato | 2D tower defense game in Godot with wave spawning and pixel art | Godot, GDScript |
| GTA High Glass | Glass and glazing contractor site with a filterable project gallery and quote form | HTML, CSS Grid |
| Hakimi Fruits | Produce business site with seasonal highlights and order inquiry form | HTML, CSS, JavaScript |
| HomeBound Aisha | Cleaning service site with pricing tiers and an accessible, validated enquiry form | HTML, CSS, JavaScript |
| Pharmacy Website | WCAG AA pharmacy site with live search, schema.org SEO and keyboard navigation | HTML, CSS, JavaScript |
| Area | Tools |
|---|---|
| Security | Splunk, Wireshark, Nmap, Metasploit, Burp Suite, Wazuh, TheHive, Cortex, MISP, BloodHound, Sysmon, YARA, nftables |
| Hardware and robotics | KrakenSDR, RTL-SDR, ROS 2, ArduPilot/Pixhawk, ESP32 and LoRa, Hailo HAT+, FLIR Lepton, MAVLink, MQTT/Zenoh, TPM 2.0 |
| Mobile and networking | Android VpnService, iOS NetworkExtension, DNS-over-HTTPS/TLS, iptables, WireGuard, Cloudflare Tunnel, Tailscale |
| Cloud and platform | Proxmox, Ceph, Kubernetes, Longhorn, MetalLB, Terraform, GitHub Actions |
Certifications (25+)
| Certification | Issuer | Status |
|---|---|---|
| CompTIA A+ | CompTIA | Active |
| Cybersecurity Defense Analyst | Cisco | May 2026 |
| Azure Cloud Architecture (AZ-900) | Microsoft | Active |
| AWS Cloud Practitioner + Cloud Security | Amazon Web Services | Active |
| Foundations of Cybersecurity | Feb 2026 | |
| Certified Information Professional (CIP) | OPSWAT Academy | exp. Feb 2027 |
| Critical Infrastructure Protection (ICIP) | OPSWAT | exp. Mar 2027 |
| Cybersecurity Virtual Experience | MasterCard (Forage) | Mar 2026 |
| EASY Framework for Threat Intelligence | AttackIQ | Mar 2026 |
| Introduction to Model Context Protocol | Anthropic | Mar 2026 |
| Cisco Routing Course | APNIC Academy | exp. Mar 2029 |
| ISC2 Candidate (CC) | ISC2 | exp. Aug 2026 |
| Diploma in Ethical Hacking | Alison | Mar 2026 |
| Computer Networks and Network Security | IBM iX | Apr 2026 |
| MSSQL Certification | Microsoft | Active |
| CCNA Fundamentals | Cisco Networking Academy | Active |
| CompTIA Security+ | CompTIA | In Progress |
Full list at tyfsadik.org/resume.html.
31 DNS records across tyfsadik.org, all behind Cloudflare Tunnels. No homelab service exposes a public port.
