# Yahya Toubali — yahyatoubali.me

> Personal site for Yahya Toubali — security researcher, founder of Nadicorp, creator of NadiVPN. The site also hosts Brain Hub v2, a 5-pillar neuroplasticity trainer with five mini-games and a live telemetry dashboard.

## About Yahya

Yahya Toubali is a Moroccan security researcher and entrepreneur. Focus areas: low-level security research, operating system kernels, web browsers, and privacy-first software. Founder of Nadicorp (UK LTD in progress), creator of [NadiVPN](https://nadivpn.com).

- Born: 2005-01-10
- Languages: Arabic (native), English (fluent), Russian (learning)
- Profiles: [GitHub](https://github.com/yahyatoubali), [LinkedIn](https://linkedin.com/in/yahyatoubali), [X / Twitter](https://x.com/yahyatoubali), [HackerOne](https://hackerone.com/yahyatoubali/), [Bugcrowd](https://bugcrowd.com/yahyatoubali), [ORCID](https://orcid.org/0009-0002-6792-9183)

## Site map

- [Home](https://yahyatoubali.me/) — terminal-style portfolio with whoami, about, projects, research, gallery, and a live brain-score teaser
- [Blog](https://yahyatoubali.me/blog) — long-form posts on security research and engineering
- [PGP](https://yahyatoubali.me/pgp) — public key
- [Brain Hub](https://yahyatoubali.me/neuro) — htop/nvidia-smi-style cognitive telemetry dashboard
- [Auth](https://yahyatoubali.me/auth) — register / login (each user gets their own private profile)

## Brain Hub v2 — neuroplasticity trainer

The Brain Hub maps directly to the five neuroplasticity pillars commonly cited in cognitive performance research:

1. **Force Myelination** → [Corsi Lattice v2](https://yahyatoubali.me/neuro/play/corsi_v2). Spatial working-memory game with forward, reverse, and decoy modes. Pushes span past comfort to drive white-matter myelination.
2. **Frontoparietal / Cross-Network synthesis** → [Polyglot Bridge](https://yahyatoubali.me/neuro/play/polyglot). Cross-domain mapping (boolean expressions ↔ gate symbols ↔ truth tables ↔ English ↔ hex ↔ binary ↔ pattern grids ↔ Python ↔ C). Forces the prefrontal cortex to bridge distant memory regions.
3. **BDNF (HIIT-style cognitive bursts)** → [Burst Hunt](https://yahyatoubali.me/neuro/play/burst). 20s on / 10s off rounds rotating arithmetic / 2-back / Stroop / odd-one-out / parity tasks.
4. **Aggressive Pruning (construct-and-destroy)** → [Construct & Destroy](https://yahyatoubali.me/neuro/play/construct_destroy). Locate the broken gate in a 3-gate cascade, then pick the correct replacement.
5. **Glymphatic Flush (recovery)** → [Recovery Loop](https://yahyatoubali.me/neuro/play/recovery). 4-7-8 breath sync or Schulte tables. Acts as a runtime gate — Hard sessions on the other games lock until a Recovery Loop completes.

Each game writes 1–2 axes on a 5-axis radar (Myelination, Cross-Network, BDNF, Pruning, Recovery). The hub's recommendation engine routes the user to the weakest axis.

## Authentication

- Email + password, PBKDF2-SHA256 (Web Crypto), JWT-signed sessions (HS256, hono/jwt)
- Each registered user gets a dedicated `cognitive_profiles` row with their own ELO, longitudinal data, achievements, and recovery gate
- Yahya's `owner_profile` is publicly readable so the homepage `cat ~/brain/profile.txt` block always shows his real telemetry

## Tech stack

- Cloudflare Workers (Hono router)
- D1 (SQLite) for users, profiles, sessions, longitudinal data, ratings, recovery gates
- React + Vite + Tailwind, Recharts for the radar / line charts, Framer Motion for animations
- Single-page app served by Workers asset handling, all `/api/*` routed to the worker first

## Useful endpoints (public)

- `GET /api/brain/profile/owner_profile/hub` — Yahya's public hub data (read-only without auth)
- `GET /sitemap.xml` — site sitemap
- `GET /robots.txt` — crawl policy (AI crawlers explicitly allowlisted)

## License & contact

Currently private; all rights reserved by Yahya Toubali. Contact via the social profiles above or email `contact@yahyatoubali.me`.