$whoami

andreas demosthenous

cs undergrad @ university of cyprus
information security (grc) intern @ eurobank cyprus
software engineer intern @ kios research and innovation center of excellence

about

i build things across the stack: geospatial python tooling at work, embedded firmware on weekends, the kernel of my own phone in between. comfortable somewhere between a syscall trace and a docker-compose file. interested in what large language models cost in joules once you're the one paying the power bill.

currently

›interning in information security — governance, risk & compliance — at eurobank cyprus
›building python / qgis tooling for geospatial water-network modelling at kios
›writing an undergraduate thesis on edge / iot predictive risk analysis for water-distribution networks
›building tuxedo-control-nix, a declarative nixos replacement for tuxedo laptop hardware control (reverse-engineered the ec ioctl interface)
›running baseplate/, my self-hosted docker stack, on a raspberry pi 5

interests

llm systems & on-device inference linux internals self-hosted infra embedded & iot geospatial python

projects // pinned

hisense-w41h1/ oss · matter firmware

de-clouded a hisense aeh-w41h1 a/c wi-fi module (realtek rtl8710c / amebaz2): sniffed and decoded its internal rs-485 protocol, then wrote custom matter firmware in c/c++ for fully local home assistant control, no cloud. ch341 flashing plus wi-fi ota, host-only qa, and github actions that build, sign and publish releases; also an esp32 (esp-matter) replacement path for dead modules.

c/c++reverse engineeringmatterrs-485amebaz2home assistant

baseplate/ oss · single-host self-host

opinionated docker-compose stack for a single host: traefik with letsencrypt via cloudflare dns-01, cloudflare tunnel for outbound-only ingress, and opt-in profiles for nextcloud, vaultwarden, paperless-ngx, home assistant, jellyfin (with pi 5 v4l2 m2m hardware decode), mosquitto, wireguard. the recipe i run on my pi 5, packaged so you can clone it and have your own homelab up before lunch.

dockertraefikcloudflare tunnelsself-hostedraspberry pi

tuxedo-control-nix/ oss · nixos module

a declarative, nixos-native replacement for tuxedo laptop hardware control — fan curves, performance profiles, keyboard backlight and charging. reverse-engineered the tuxedo_io kernel ioctl interface and built a small root daemon (plus cli, tui and gtk4 gui) to replace the official electron app.

nixrustreverse engineeringlinux ecnixos module

android_kernels/ downstream

maintained device trees and kernel forks for xiaomi (lavender, sdm660-common) and samsung (universal7880) devices on aosp / lineageos. low-level dive into arm bring-up, vendor blobs, and kernel patches.

aosplineageoslinux kernelarm

smart_home_iot/ private · multi-node

multi-node home automation and a custom-built security system across esp32 and raspberry pi units; full-stack web ui for monitoring and control.

esp32raspberry pimqttfull-stack web

dotfiles/ oss · hyprland desktop

my hyprland + quickshell desktop on arch: a fork of illogical-impulse with custom widgets i wrote — home assistant control, a vpn/network pill, an rss reader with article view, and a homelab glance panel — wired to the services i self-host.

hyprlandquickshellqmlwaylandarch

andreas demosthenous

about

currently

interests

projects // pinned

contact