B Horn (bah)

I'm a software engineer interested in infosec and systems software. Worked on various things from bootloaders and USB protocol reverse engineering to graph algorithms and remote sensing. I also used to organise hackathons during my undergrad.

Github (@bahorn) / Blog / b AT horn DOT uk

Education

MSc Computing Science at Utrecht University (2020-2023)

My Masters Thesis focused on the Parameterized Complexity of Defensive Alliances (a graph theory problem about finding subsets of a graph where the vertices have more neighbours in the subset than outside of it).

First Class Honours BSc Computer Science at Coventry University (2016-2020)

Thesis was on object detection in Satellite imagery, focused on the Sentinel 2 dataset.

Publications

I've gotten some work of mine in zines:

• "Stack Clashing the GRUB2 Bootloader" in 'Paged Out! #8'
• "Adapting SHELFs to make LKM-less Kernel Modules" in tmp.0ut #4
• "Misusing XDP to make a KV Store" in 'Paged Out! #5' (pg. 20)

Security

I have found security flaws in:

• GRUB2, a ton of issues ranging from stack clashes to use-after-frees which resulted in me being able to develop a bypass for UEFI Secure Boot.
• TP-Link EAP Access Points, a predictable session issue that I exploited via a timing side channel to determine when a user was active.
• Terramaster NASs, finding a service that wrote your ssh key to `/root/.ssh/authorized_keys`...

The CVEs attributed to me are:
CVE-2024-45781, CVE-2024-45782, CVE-2024-45783, CVE-2025-0622, CVE-2025-0624 and CVE-2025-1118.

Travel

I've spent extensive time abroad and have been to over 50 countries.

Done a lot of backpacking around the world. This includes backpacking through the Southern Caucasus (Azerbaijan, Georgia and Armenia) in 2017, Central Asia (Kazakhstan, Kyrgyzstan, Tajikistan and Uzbekistan) in 2018, Ghana in 2023, and every country bar one in South East Asia (including Malaysian Borneo, Brunei and Timor-Leste) in 2025.

Travelled around solo in many off the beaten path places like Oecussi in Timor-Leste, Banggi Island and the Kelabit highlands in Borneo, and the Volta Region of Ghana.

I've also done an internship based around remote sensing in Cape Town (South Africa) and Cultural Exchanges with school and university in Oslo (Norway), Helsinki (Finland) and Guangzhou (China).

Hiring

Open to full time positions in The Netherlands, Ireland, or remote. CV provided on request, please contact me at b AT horn DOT uk from a corporate email if you are interested.

Last updated 2026-02-18