Heitor Gouvêa

Publications

1. Playing with brazilian financial apps for fun and profit:
   • [03/01/2020] From an Open Redirect in a Brazilian Bank to Account Takeover;
   • [23/06/2020] A little case about scraping personal data exposure in the web;
   • [21/12/2022] Chaining client-side vulnerabilities to make a web app unavailable;
2. Helping to keep the Perl Programming Language secure:
   • [19/03/2023] A lightweight static security analysis tool for modern Perl Apps;
   • [08/12/2021] Scaling Libs security analysis with Differential Fuzzing;
3. Vulnerability research notes:
   • [23/09/2020] Detecting Tor Browser platform based on exclusive font rendering;
4. Product lessons from the field:
   • [26/04/2026] The Last 20%;
   • [23/02/2026] Productive Inversion Strategy;
5. Building high-performance Technical Teams:
   • [30/05/2023] The importante of context metrics;
   • [30/05/2023] Historical metrics VS Tracking metrics;
   • [05/09/2023] Direction is more important than velocity;
   • [27/01/2026] A brief essay on technical mentorship;
   • [26/04/2026] Should we buy or build?;
6. Privacy notes:
   • [08/03/2026] Host-based anonymous networking via transparent Tor redirection
7. Side notes:
   • [11/06/2025] On the creative process;