Notes from the Trail

I’m an information security practitioner focused on Android internals, mobile app security, and reverse engineering. I’m currently building expertise across malware analysis, vulnerability research, and web application security, with a long-term focus on mobile and platform security.

I’m a hands-on technologist by inclination. I learn by experimenting, taking apart real apps, and building public tools (NutriAtlas, ASIC, Truepull, ProbNative), and documenting what I find.

I’ve led the null Bhopal chapter and founded my college’s Google Developer Student Club. I’m Security+ certified, and lately I’ve been digging deeper into web security, partly out of curiosity and mostly to widen the surface I can find bugs on. In my free time I hunt bug bounties.

My work, writing, and write-ups live on this blog and at github.com/i-shivamsoni.

Beyond the technical work, I’m someone who seeks, who wants to know, and who’s trying to live a balanced life where my rational mind and emotional mind aren’t fighting each other. Most of the interesting answers, in my experience, live in the places where logic and feeling have to compromise.

I read a lot, train, and try to grow plants into trees, with mixed results.

“One of the best ways to learn is to build things and break them. Preferably in that order.”

About this Blog

Trails and Errors. The pun is intentional: the journeys (trails) and what went wrong along the way (errors). Some posts are technical: rooting AVDs, reverse-engineering Android apps, security writeups. Some are reflective essays on failure, on effort vs. result, on whatever’s been turning over in my head. If it made me think hard enough to want to write it down, it probably ends up here.