Publication
修复“心脏出血”OpenSSL漏洞:系统管理员教程
http://antennas.dzpages.com/freelance/the-heartbleed-openssl-bug-what-you-need-to-know
Gergely is available for hire
Hire GergelyGergely Kalman
Verified Expert in Engineering
Python Developer
Location
Málaga, Spain
Toptal Member Since
April 4, 2016
Gergely是一位多才多艺的CTO，在许多不同的技术方面拥有丰富的经验. 他能够从头开始设计系统，并将其贯穿整个生命周期. Having managed his own tech team, 他从不回避管理他人或为商业决策提供建议.
Portfolio
NDA (via Toptal)
Crypto, Blockchain, Django, Python
Universal Music Group
Python, Google Cloud Platform (GCP)
Buffered.com
Linux, Kivy, wxPython, Python, Django, OpenVPN
Experience
Availability
Part-time
Preferred Environment
Linux
The most amazing...
...我人生中最大的挑战就是独自为我的创业公司编写所有的代码.
Work Experience
Consultant and Blockchain Developer
2018 - 2019
NDA (via Toptal)
- Refactored a large legacy codebase.
- 帮助指导业务和架构决策.
- 设计并实现了分布式架构.
- Fixed lots of security bugs.
- Uncovered business-level vulnerabilities.
Technologies: Crypto, Blockchain, Django, Python
Senior Consultant
2018 - 2018
Universal Music Group
- Refactored a Python tool.
技术:Python, Google Cloud Platform (GCP)
Co-founder, CTO, CEO
2014 - 2018
Buffered.com
- Singlehandedly designed and implemented the MVP.
- 设计网络和api以及桌面客户端.
- 在公司的整个生命周期中管理开发团队.
- Ran the company as managing director (CEO).
技术:Linux, Kivy, wxPython, Python, Django, OpenVPN
Software Engineer, Interviewer
2011 - 2014
Toptal, LLC
- 使用Django和Jinja2为个人项目实现了几个简单的网站.
- 使用wxPython、OpenVPN和OpenSSL实现基于OpenVPN的桌面软件.
- 面试了大量的候选人，彻底改革了面试流程.
技术:Jinja, Django, OpenSSL, OpenVPN, wxPython
Head of Media Platform Development
2010 - 2011
DuoDecad, LLC, Media Platform Division
- 作为Adobe Flash Media Server的替代视频流平台的唯一开发人员(前8个月)(媒体平台部门(MPD)的主要目标).
- 使用协议的非官方文档和手动逆转，在一年内实现了我们的目标.
- 在Python 3中设计并实现了直播分发和转换架构.
- 经过优化，允许一个节点以大约10Gbit/s的速度为超过10万个客户端提供服务.
- 支持即时转码传入的音频和视频.
- 对性能进行基准测试，并将繁重的代码迁移到C语言.
- 将几个Libav库集成到Python中用于流转换.
- 研究并协助项目硬件采购.
- 为Python设计了一个带有自定义套接字处理的自定义事件驱动接口, including FLV format handlers.
- 检测到Adobe格式和Libav格式的错误.
- Administered MPD's machines (about 80).
- Tuned machines for maximum network performance.
- 讲授IT安全、MPD项目和Python编程.
- 迭代，直到集群的峰值性能接近100Gb. With 30 machines, 它将能够完全接管现有的流集群(100+节点)。.
技术:AMF, RTMP, Linux, C, Python 3, Libav
IT Security Specialist
2008 - 2010
DuoDecad, LLC, IT Security Division
- 执行软件审计、渗透测试和压力测试.
- 实现了主站的故障转移架构.
- 协助我们的合作伙伴公司获得支付卡行业数据安全标准(PCI-DSS)合规.
- Devised company policies for PCI-DSS, developed architecture, 并作为IT安全人员的一部分举办教育课程.
- 对面对大量DDoS流量时Linux内核的行为进行基准测试. 调整和修补内核以实现最大的弹性.
- 作为事件响应小组的一员.
- 用C语言开发了一个网络分析器，创建了传入HTTP请求的实时统计数据，并确定了攻击者.
- 将旧的OpenSSH分支修改移植到最新版本.
技术:C, Linux Virtual Server (LVS)， Keepalived, Iptables, Linux
IT Operator
2008 - 2008
DuoDecad, LLC, IT Security Division
- 帮助管理几百台Linux机器.
- 主要支持内核和网络相关问题.
- 为了管理目的，用bash编写了小脚本.
Technologies: Linux
Experience
PCI-DSS Consultant
为Lalibco提供咨询和架构帮助, which processed more than $500,000 daily for an Alexa top 50 website. 在他们的系统中发现了几个错误和安全漏洞. 我是为PCI-DSS审核准备的，审核顺利通过.
Online Payment Architect, PCI-DSS Consultant
帮助设计Escalion (Lalib的继任者)的系统架构，从网络到服务到策略和流程. 就安全软件实践提供意见，并制定政策和程序以确保持卡人资料的安全. Escalion通过PCI-DSS测试，接管了Lalib每天约50万美元的交易.
Real Estate Scraper
我为匈牙利最大的房地产网站写了自己的刮板，以获得惊人的交易.
Buffered.com
我已经创建了自己的VPN启动称为buffered.我曾担任过三年的首席技术官和一年的首席执行官.
Publication
10 Common Web Security Vulnerabilities
http://antennas.dzpages.com/cyber-security/10-most-common-web-security-vulnerabilities
Publication
我如何用Python视频流使色情片效率提高20倍
http://antennas.dzpages.com/python/how-i-made-porn-20x-more-efficient-with-python
Publication
信用卡黑客:通过一些技巧，被入侵的卡号仍然可以在谷歌上搜索到
http://antennas.dzpages.com/web/with-a-filter-bypass-credit-card-numbers-are-still-still-google-able
Skills
Languages
C, Python, Bash, Python 3, c++， PHP, Assembler x86
Frameworks
Django, Scrapy, Jinja, Qt, Django REST Framework
Libraries/APIs
Libav, PyQt, OpenSSL, AMF, Kivy
Tools
OpenVPN, Scraping Hub, Git, Terraform, Ansible, Packer, wxPython, Keepalived, Linux Virtual Server (LVS)
Paradigms
REST, Object-oriented Programming (OOP), Imperative Programming, Event-driven Programming, DevOps, Penetration Testing
Platforms
Linux, Docker, Amazon EC2, Amazon Web Services (AWS), Raspberry Pi, Blockchain, Proxmox, AWS Lambda, Windows, Google Cloud Platform (GCP), MacOS
Storage
Amazon S3 (AWS S3), Memcached, Redis, MySQL
Industry Expertise
Security, Cybersecurity
Other
Freelancing, Ethernet, TCP, UDP, SSH, Code Auditing, Iptables, Software Architecture, Scraping, System Administration, SaaS, Web Development, System Security Developer, Leadership, Embedded Hardware, Internet of Things (IoT), Embedded Software, WordPress Plugins, Serverless, RTMP, Crypto
Education
2005 - 2007
Bachelor's Degree in Computer Science
Eotvos Lorand Science University - Hungary
Certifications
NOVEMBER 2019 - NOVEMBER 2022
AWS认证解决方案架构师-助理(SAA)
Amazon Web Services (AWS)