Tony Gorez, Senior Systems Engineer

Support iOS and Android development of Keet application by providing native abstraction and bindings.

• Exposing push notification capabilities in Javascript
• Maintaining https://github.com/holepunchto/bare-ffmpeg
• Maintaining a doctor app for Android and iOS to check bare-runtime compatibility.

Senior Systems Engineer within the Desktop Foundation team.

Research on a cross-platform framework that empowers developers to build hybrid applications (native/web).

Achievements:

• Lead macOS platform team: do preliminary research and help mates to pick up and achieve their goals.
• Wrap Apple native (Objective-C) Linux and Win32 APIs (C, C++) through a unified C++ API (key-value store, open, HTTP server and client, UI).
• Bridge various C++ APIs to the Javascript using the JavascriptCore engine.
• Make our runtime compliant with existing Javascript and Node.Js APIs (setTimeout, console, process…)

Systems Engineer II, within the Desktop Foundation team.

Leverage my expertise in C++ and Node.js to improve the Postman desktop app's capabilities. My role involves a combination of research and development and the implementation of native solutions.

Achievements:

• Writing and maintaining a C++ binding for Node.Js aiming to enable HTTP/2 and HTTP/3 within the Postman Application
• Contributing to a platform framework to develop cross-platform hybrid applications
• Actively contributing to the Single Executable Working group within the Node.js organization aiming to release the initial SEA in Node.

Software Engineer II, within the Developer Productivity team.

I’m the first member of a 6-member team. We aim to ensure a good developer experience by improving tooling and internal processes for a pool of +250 developers.

Achievements:

• Reduced CI post-integration pipeline by 55% (45 to 20 minutes)

  • - 150 hours of waiting by week and Spending 62% fewer credits on CI

• Improved Hot Module Replacement (HMR) time by ~57% (35 to 15 seconds)

  • 88 hours of engineering a week

• Enhanced several code quality tools (Eslint, Prettier) by profiling existing Eslint rules and improving performance issues

Joined the Node.js team as a consultant within a team of six engineers.

Achievements:

• Correct the historical technical debt by covering the scope of the service with proper functional and unit tests.
• Improved code quality by enabling a continuous integration pipeline
• Interfaced the current system with the third-party Quickbooks
• Migrated the legacy codebase to Fastify.js framework and TypeScript.

The PayFit app enables you to manage your payroll and HR tasks. Worked on Jetlang: a low-code platform with its language expressing payroll logic (DSL) used by +100 engineers.

Achievements:

• Maintain Jetlang I/O services: UI generation at runtime & exports
• Maintain Jetlang IDE; this includes deployment, versioning, linter & pretty-printer
• Build a static analysis service that extracts dependencies, deep dependencies, or SCC (to prevent performance issues)
• Design and implement a decision tables model in the platform
• Hosting the Quality Guild Strategy across the company.

Amplement is a Slack-like application that provides video and audio calls in white-mark. Responsible for new features (design and implementation) and involved in the front-end application recast (released in September 2019).

Achievements:

• Normalize API calls and web socket messages using Redux as state management
• Simplifying code base by using the presentational / container pattern
• Migrating the React codebase: switch from state and lifecycle method to useState, useEffect

Machore is a C library and CLI tool for analyzing macOS/iOS Mach-O binaries, facilitating reverse engineering and security research handling:

• Both single-architecture and fat (universal) Mach-O binaries
• CPU architecture (x86, x86_64, ARM, ARM64)
• Binary type (dylb, executable, core dump …)
• Dynamic libraries
• Strings and their context (segments, sections)
• …

• After several years as a core maintainer, I shifted my focus to security research within the NodeSecure project. My current work centers on advancing js-x-ray for static analysis and improving detection of JavaScript malware patterns in open-source packages.
• Introduced a suspicious command detection probe to flag dangerous usage of spawn and exec, helping identify malicious or risky behaviours during analysis

I share technical research and analyses on macOS internals, reverse engineering, and security research—explaining how Apple’s internal mechanisms work through hands-on experiments.

• Contributing to the development of a high-performance JSON schema compiler, focusing on performance optimization and correctness improvements.
• Co-authoring a paper on JSON schema compilation, with an emphasis on performance and correctness proofs.
• Profiling the codebase using Instruments (macOS), benchmarking with gtest, and debugging with LLDB to identify and optimize critical paths.

This C++ library aims to simplify runtime creation by delivering a unified API around Javascript Engines (JavascriptCore and v8). The project is still in the early stages.

Native is a C++ framework designed to streamline the development of cross-platform desktop applications for C++ developers. It is build around a webview, but we plan to create a library of UI cross-platorm components. My final goal is to offer a stable API to build hybrid (web and native) applications.

Contributions:

• Designed and implemented modular components such as a Window, a WebView, and system utilities

• Integrated platform-specific functionality using Objective-C++ for macOS (AppKit) and C++ Win32 APIs (WebView2).

• Ensured maintainability and extensibility by using CMake for build system modularity.

Note: this is an early alpha

• Member of the Diagnostic Working group
• Member of the Single Executable Working group
• Attempt to work on fs performance (wip)
• Did a few maintenance tasks