I'm Aldo — a solo engineer who decodes closed mobile APIs, then turns the findings into clean backends, streaming infrastructure, and automation that real businesses run on.
I don't ship one-off scripts. My instinct is to turn a messy target into a clean, reusable platform — the same pattern I've applied independently across very different domains.
Capture traffic, break the signing and encryption, and map exactly how a closed system talks — signatures, tokens, protobuf, expiring URLs.
Fold every target behind one clean interface: plugin-per-source, shared auth, caching, scheduling, and an ops control panel. Prototype → platform.
Rate limits, failover, token auto-refresh, monitoring. Software that keeps working when I’m not watching it — and that clients depend on daily.
Depth in the unglamorous parts — signing, crypto, streaming, anti-bot — that most people route around.
Flagship builds where the engineering carries the whole product.
A modular content-aggregation API that unifies 35+ reverse-engineered mobile backends behind one clean REST interface. Plugin-per-source, Redis caching, rate limiting, automatic token refresh, and a Telegram ops bot.
A zero-disk streaming microservice that transcodes any codec — including H.265 — to 720p H.264 on the fly through a single-lane FFmpeg pipe, with automatic failover between nodes.
One backend, many brands. A multi-template Astro frontend with a middleware layer and its own datastore — designed to re-skin an entire product per client without touching the core.
A CLI-first, MCP-ready trading assistant: multi-timeframe market reads, risk sizing, and paper-trade journaling in SQLite, wrapped in fail-closed safety rules. Its decision skill was stress-audited across three different AI models.
Real, paid systems built at clients' request and under their authority. The capability is on the table — the client names and exact targets stay redacted.
Built for a licensed ██████████ operator to automate a high-volume, repetitive booking & registration workflow — reclaiming operator hours on a process that was fully manual before. Delivered at the client’s request and under their authority.
End-to-end automated account provisioning for a ████████ platform, driven from a Telegram control panel with async workers and a companion web app.
Hands-on research into modern bot-protection: TLS fingerprint spoofing, browser challenge solving, and anti-detect browser automation against ████████ targets.
A unified automation engine coordinating many ██████ accounts across platforms, with a scheduler, shared auth, and per-platform plugins — the same platform-ise instinct, applied to operations.
Backend, reverse-engineering, streaming, or automation — if it's hard and specific, it's my kind of work. Start on GitHub.