muffin.ink

Blog

The woes of sanitizing SVGs (2026-04-11)
The Blocklive malware incident (2024) (2026-03-30)
Paper.js XSS (2026-03-27)
Migadu email review (2026-03-14)
A tale of two Electron apps (2026-03-01)
MinneHack 2026 CTF puzzles and solutions (2026-02-20)
Bananatron and the disappointing state of Electron app security (2025-04-12)

Things I've worked on

TurboWarp · Creator · Website · GitHub

Block-based programming language. JIT compiler runs 100x faster than Scratch. Cross-platform desktop app using Electron. Extensive custom extensions ecosystem including 1400+ new blocks in curated extension gallery. Packager converts projects to HTML or app for Windows/macOS/Linux.

Scratch Addons · Core contributor · Website · GitHub

Browser extension for Scratch. Created or made significant contributions to 40+ addons. Created ground-up rewrite of all internals to port addons to TurboWarp.

forkphorus · Creator · Website · GitHub

Predecessor to TurboWarp. Developed custom end-to-end testing framework. Migrated from JavaScript to TypeScript. Emphasis on memory efficiency for underpowered devices such as Raspberry Pi.

Where to find me

GitHub: GarboMuffin

Where to contact me

Signal: muffin.01
Email: muffin@muffin.ink

<- blog ring ->