I’m Luigi (werew), a security engineer based in London.

This blog is a place for me to document research, writeups, and thoughts on security, computer science, or anything else I find worth writing down.

About me

I’ve spent the last several years at Meta working on product, platform, and AI security: threat modeling and reviewing generative AI services, driving security roadmaps for Hermes (the JavaScript engine behind React Native), building security telemetry for mobile apps, rolling out secret scanning across CI/CD, and hunting for vulnerabilities, including publicly disclosed CVEs in WhatsApp and Folly. More recently a lot of my time goes to agentic systems and the security of LLM integrations.

Before that I interned at Quarkslab working on reverse engineering tooling and research on automatic deobfuscation. I hold an MSc in Security & Privacy (EIT / Twente / Trento) and a BSc in Computer Science from the University of Strasbourg. I’ve also played my share of CTFs.

On the use of AI

I employ AI in my day-to-day activities, including the creation of content for this blog. In practice I use AI to correct drafts, polish and enhance content, and automate experiments: running variations, processing results, building tooling I’d otherwise skip.

Ideas, research questions, hypotheses, conclusions, and opinions are mine. Everything published here is reviewed and adjusted by me before it goes out, so blame me for the mistakes.