RasselChioe

(+) Capabilities

• (01)Cybersecurity+

  Security is the lens for everything I build — proven on my Password Strength Auditor, from entropy estimation to a hash-cracking simulator.

  • Password auditing
  • Hashing & salting (bcrypt vs MD5/SHA)
  • Entropy estimation
  • HIBP k-anonymity
  • Secure authentication (JWT, httpOnly cookies)

• (02)Software Testing+

  Black-box first: I specify the behaviour, then attack the implementation. 44 Playwright end-to-end tests keep Stash honest.

  • Playwright
  • pytest
  • JUnit
  • Unit testing
  • End-to-end testing
  • Black-box testing

• (03)Full-Stack Development+

  From schema to UI: typed APIs, React front ends, and AI-assisted implementation with Claude Code.

  • Python
  • Java
  • TypeScript
  • JavaScript
  • SQL
  • Haskell
  • React
  • Node.js / Express
  • Prisma
  • Tailwind
  • REST APIs
  • HTML/CSS
  • Git & GitHub
  • Linux
  • Cloudflare
  • SQLite

(02) Selected Work

• (01)StashLive ↗GitHub ↗

  A personal finance tracker

  Track income and expenses, set monthly budgets and savings goals, and see where your money goes with clean analytics. Handles multiple currencies with live exchange rates, and reads bank-statement CSVs to auto-detect recurring charges and frequent stores — kept honest by 44 Playwright end-to-end tests.

  • React
  • TypeScript
  • Vite
  • Tailwind CSS
  • Chart.js
  • Node
  • Express
  • Prisma
  • SQLite
  • JWT auth
  • Playwright
• (02)KadenceGitHub ↗

  Editorial cycling analytics for one rider

  A private, single-user GPX archive — a from-scratch parser computes distance, elevation, Normalized Power, per-kilometre splits and FIETS-style climb categories, rendered as an editorial dashboard where the MapLibre map and speed, heart-rate and power charts share one cursor. An archive, not a network.

  • Next.js 15
  • TypeScript
  • Tailwind
  • MapLibre
  • Recharts
  • PostgreSQL
  • GPX parsing
  • Unit tests
• (03)Photography Portfolio(private repo)

  A cinematic photography exhibition

  A cinematic, exhibition-style photography portfolio with editorial motion — GSAP and Lenis-driven scenes, static export, and Cloudflare R2-ready images.

  • Next.js 15
  • TypeScript
  • Tailwind v4
  • Framer Motion
  • GSAP
  • Lenis
  • Cloudflare R2
• (04)Password Strength AuditorGitHub ↗

  Static analyser + cracking simulator

  Scores passwords across length, charset variety, keyboard walks, dictionary hits, entropy and HIBP k-anonymity — then proves the score empirically by cracking weak examples with dictionary, rule-mutation and bounded brute-force attacks over MD5, SHA and bcrypt, with timings.

  • Python
  • Entropy estimation
  • HIBP k-anonymity
  • bcrypt vs MD5/SHA
  • Dictionary attacks
  • CLI

  +Try it live— runs entirely in your browser, nothing leaves this page

  >show

  —

  Toy estimate for the demo — the full auditor adds HIBP k-anonymity checks and proves scores with a real cracking simulator.

(03) Experience

1. Sept 2024 — Present

   Finance Team Member

   PPI Liverpool

   Budgets, demand forecasts and risk assessments for social and sports events — expense tracking, reimbursements and break-even pricing set with departmental teams.

2. July 2022 — Aug 2024

   Assistant Photography Intern

   ILUMINEN, Bali

   Supported full event coverage — lighting, monitor and gimbal setups — and organised client deliverables with data integrity and on-time delivery.

3. Dec 2022

   Information Technology Intern

   Murni Cosmetics, Bali

   Collected and analysed sales data across e-commerce platforms and the point-of-sale system to spot trending products and support forecasting and inventory planning.

4. July 2022 — June 2023

   Production House Documentation Team

   Regents Secondary School, Bali

   Ran event documentation and Instagram content reports for the student union, keeping branding consistent across departments under tight deadlines.

(+) Education

Full CV (PDF) ↗