Bruno Bezerra Trigueiro

Education and work

• University of São Paulo (USP)2026–

  BSc in Mathematics

  Institute of Mathematical and Computer Sciences

• Itaú UnibancoOct 2026–

  Data Engineering

  Internship

• Fatec Baixada Santista – Rubens Lara2023–25

  Associate degree in Systems Analysis and Development

• São Paulo State University (Unesp)2020–22

  BSc in Mathematics

  not completed

  At the end of high school, I was admitted to UFRJ, UFMG, Unicamp and Unesp (twice), four of Brazil’s leading public universities, as well as Fatec and Unisantos. With classes remote during the pandemic, I chose Unesp. Later, my father fell ill. It became hard to keep up with my studies, and my grades fell. Near the end of his life, I went home to be with him and my family. After spending the resources I had on his care, I left the degree program.

• State Technical School (Etec)2018–19

  Systems Development technical course

• Armando Victorio Bei State School2017–19

  High school

  High school was difficult for me. The area where I lived and went to school had a high crime rate. The school put a lot of effort into keeping us in class and away from crime. I was unmotivated and missed a lot of school. In my final year, I chose to study the curriculum on my own, using notes borrowed from friends in my technical course at Etec, a public technical school where they also attended high school.

Research

• On the Geometry of the Two-Circle Wheatley Leaflet2026

  The Wheatley valve is a prosthetic aortic valve with three polymer leaflets, designed to be cut from a flat sheet. In the reinforced version by McKee et al. (2026), I show that the two halves of each leaflet meet at a 41–47° fold and that each half can be cut from a flat sheet, but the whole leaflet cannot. The main identities are proved in Lean 4. The note is independent, grew out of a talk about the valve and was written with the help of a multi-agent system. [code and proofs] [original paper]

• Newcomb-Benford’s law in COVID-19 deaths2023–24

  Newcomb-Benford’s law predicts how often each digit leads numbers that arise naturally, and departures from it help flag manipulated or poorly collected data. I applied the test to daily COVID-19 deaths in 128 countries. Japan and Montenegro came closest to the law; Vietnam and Congo-Brazzaville were furthest. The largest departure came from Brazil’s press consortium (Consórcio de Veículos de Imprensa), whose data I extracted by intercepting the site’s requests, since it offered no download: the digit 5 led 33% of its counts against 7.9% expected, a larger departure than any country’s. Undergraduate research (PIBITI/CNPq) at Fatec, advised by Prof. José Augusto Pazetti, presented at SICT 2024 and the ICMA International Congress. [code]

Open source

• VLC2026

  VLC has passed 7 billion downloads. Three of my fixes have been merged into the library that indexes media in VLC, including on Android; the first two shipped in version 0.13.3 and go into the next VLC for Android release. The main one, rated high severity by the maintainers, fixed 64-bit integers being stored in the database truncated to 32 bits: files over 2 GiB got wrong, sometimes negative, sizes, and the 3 GiB cache limit stopped applying. The others brought episodes downloaded piece by piece, such as a torrent in progress, back into Android’s grouped view and fixed folders’ track counts and durations, which could go negative. [!820] [!821] [!825]

• FFmpeg2026

  The audio and video libraries much of the internet relies on without noticing: YouTube and Netflix process video with it, and Chrome and Firefox use it to play media. While testing FFmpeg with libcurl, I found three problems in reading HLS and DASH streams. I opened a pull request, still under review, so that segments inherit the playlist’s TLS and HTTP version options: a custom CA, client certificates and certificate verification set on the command line never reached the segments. I also reported two issues; for one of them, where an unsupported HTTP version was silently ignored, a project member has already opened a fix. [#24809] [#24811] [#24812]

• Overwolf2026

  A platform for gaming apps and overlays. Overwolf verifies the signature of its Core DLL at startup, but that does not protect the code that actually runs. I built a proof of concept in which a CLR profiler replaces, in memory and right before the JIT, the methods that report an extension’s subscriptions and unlocks premium features locally, as in Outplayed, and reported the issue to Overwolf. [write-up]

Projects

• Dark Seal2023–25

  A project I created and led: a desktop client for League of Legends skin mods, with a catalog, incremental updates and a party mode. Its open skin repository, lol-skins, passed 940 stars and 220 forks, and the site had about 1.2 million visits, as reported by Dark Seal.

• Sieve2026

  Telegram bot that watches promotions and only forwards the ones matching preferences written in plain language. Deterministic rules and BM25 discard almost everything before an LLM sees it; it is built to run indefinitely on a 2 GB Raspberry Pi 4.

• Sphinx2023

  Experimental image cipher built on chaotic maps and DNA-style encoding, drawing on papers in the area.

Everything else is on GitHub.

Writing

• After WinTrust, before the JIT: rewriting IL without touching the DLLSep 2026

All writing