-:-:- · SURAT, IN

backend & systems engineersurat, india

Backend & Systems Engineer

ml, dl & llm harness implementation - inference, agents, mcp, on-device

Founding Engineer @ Saras - building the systems & AI behind advisor intelligence over live-market data.

Backend engineer who finds zen in the terminal. New tech drops and I go feral to reverse-engineer it. A 1000x extrovert with people I know, a 10000x introvert with everyone else. Big-time overthinker, terminal-over-IDE kinda guy.

BACKENDSYSTEMSAIINDIE OSS

read.blog()say.hi()view.resume()

now playing

nothing rn

offline · zzz

-:--

current stack

python

pytorch

vllm

go

postgres

cloudflare

typescript

elsewhere

[email protected]@thedev_dv @d23.io /vakharwalad23 /devdhruvvakharwala

recent writing

Speculative Listening Explained: What a Full-Duplex Voice Paper Means for On-Device Speech Recognition

Speculative listening decodes the next audio chunk before it arrives: 2.6-2.8x faster, lossless. Why it fails for ASR, and where it works in dictation.

*sshole (CVE-2026-123158): Is Your Alpine OpenSSH Affected, and How Do You Fix It?

CVE-2026-123158 (sshole) lets an oversized password bypass OpenSSH on musl Linux without PAM. How to check Alpine, OpenWrt and Docker, patch, and harden.

LiteLLM Got Compromised Again: Anatomy of the 1.107.0 Supply Chain Attack

How GitHub tokens leaked into AI gateway logs let attackers ship a credential-stealing LiteLLM 1.107.0 to PyPI and Docker, and what to rotate now.

eMudhra (emSign) CA Key Compromise: The Private Key Was the Number 4

Eight eMudhra (emSign) intermediate CA keys were tiny integers anyone could recover. Full timeline, CVEs, patched versions, and how to stay protected.

PHP2Shell: Anatomy of the CVE-2026-109618 and CVE-2026-109619 Unauthenticated RCE

PHP2Shell (CVE-2026-109618/109619) is an unauthenticated RCE hitting PHP 5, 7 and 8. The root cause, the live exploitation, and how to patch and harden.

Talk to Chart: Chatting With a TradingView Chart Using Jev, GPT-5 and My Own Pine Interpreter

Chat with a TradingView chart: TypeSafe's Jev routes asks into typed commands, GPT-5 plans the hard ones, and Pine runs in a Web Worker on my own interpreter.

nalgo: Building a Pure-Rust Algo Trading Platform for Indian Markets on NautilusTrader

How I am building nalgo: pure-Rust algo trading on NautilusTrader for Indian brokers. Connect your broker, write a strategy in plain English, let it trade.

20 Milliseconds of Writing Zeros: Profiling FluidAudio and Fixing It Upstream

Profiling Parakeet on Core ML found 20 ms zeroing a buffer one NSNumber at a time. FluidAudio#941: 72.6 to 48.2 ms, and review made the fix smaller and safer.

No Public Ports: Zero-Trust Team SSH to a Private Azure Cluster with a Reverse Bastion and Cloudflare WARP

Team SSH to a private Azure dev cluster with zero open ports: one outbound cloudflared bastion, Cloudflare WARP, Google SSO, and the split-tunnel routing trap.