Nick / ck0i
Security software.Anti-cheat.
I build security software, and work on anti-cheat
compatibility with EA's Javelin team.
I learned to code by taking games apart.
Most people online know me as koi. I began with Minecraft mods and later built Java and C++ cheats. After high school, I moved into cybersecurity product work.
In 2026, I joined Javelin Anti-Cheat at EA, where I work on anti-cheat compatibility and other related features.
EER ≤ 0.001 / 43,216 human trials
Synthetic mouse detection.
Kinematic Features Are All You Need asks whether software can tell a human hand from generated input, using the shape and timing of 43,216 recorded movements from 29 people.
The 17-feature detector finds more than 99.5% of generated movements at under 0.1% false positives on Balabit and BOUN.
Research detailsSelected work.
Windows software and independent security research. Each link points to a live project or published result.
- 01 Argus A security issue I found in Microsoft Defender's KSLD driver that exposed privileged kernel memory operations. Research
- 02 Cloakwork A C++20 library that adds compile-time encryption and code obfuscation without a separate build step. Open source
- 03 SigmaDrift A C++ mouse movement generator built around computational motor-control models. Open source
- 04 Frameshift A Windows app that monitors performance and tunes the system while you use it. Product
Technical writing.
All writing- 01 IMDUI: an immediate-mode C++ UI framework for Windows
- 02 Argus: Kernel memory disclosure through Defender's KSLD process gate
- 03 Disarming Windows Code Integrity through unprotected .data globals
- 04 SigmaDrift: a biomechanical replacement for WindMouse
- 05 Obfuscating kernel drivers without crashing
Background.
I started coding at 12 by building Minecraft mods and small exploits. Those projects led me into game cheats, first in Java and then in C++, and from there into security work.
About Nick