Security Engineering · Privacy Computing
Heidelberg, Germany
hello@mayfly.wiki· github:7feilee· in:flodyli· x:@7feilee
rev. July 2026
Abstract. Ten years of security engineering across NEC Laboratories Europe, Alibaba, and NIO. I work on systems whose guarantees hold without trusting the operator — multi-party computation, homomorphic encryption, trusted execution, federated learning — and on the operational side of security at enterprise scale. Two IEEE publications. Currently building Mayfly, an EU AI Act compliance advisory that uses privacy-enhancing technologies as the bridge between Chinese AI companies and European regulation.
Premise. Trust is a property to be verified, not a feeling to be marketed. Accordingly this page is plain HTML — no scripts, no analytics, no cookies, no third-party requests — and each claim below links to something you can check.
| Years | Position | Organization | Place |
|---|---|---|---|
| 2026 — | Founder | Mayfly | Heidelberg |
| 2024 – 26 | Lead Information Security Engineer | NIO Inc. | Munich |
| 2022 – 24 | Research Scientist | NEC Laboratories Europe | Heidelberg |
| 2019 – 21 | Privacy Computing Researcher | Alibaba Group | Hangzhou |
† NIO: led EMEA security operations; SIEM migration to Microsoft Sentinel — cost −60 %, mean time to respond −80 %. NEC: SGX-based secure AI inference; NFC passport reader with mutual authentication. Alibaba: HomoPAI, production privacy-preserving ML on homomorphic encryption [2].
| Years | Degree | Institution |
|---|---|---|
| 2018 – 20 | MSc, Cybersecurity | Harbin Institute of Technology 哈尔滨工业大学 |
| 2014 – 18 | BSc, Computer Science | Harbin Institute of Technology 哈尔滨工业大学 |
† National Cybersecurity Scholarship, 2019. CTF competitor, 2015 – 2019.
| Tool | Function | Property |
|---|---|---|
| ai-act-risk | EU AI Act risk-tier classifier with obligations & PET recommendation | client-side only |
| hd-keygen | BIP39 mnemonic → Bitcoin / Ethereum / Solana keys (noble cryptography, inlined) | offline, no CDN |
† Both run entirely in the browser; no data leaves the device. Source in this site’s repository — audit before use.
Long-form wikis (Chinese), each an attempt to map a domain end to end. Open-source, illustrated, statically hosted. Full index with abstracts: writing.
| Date | Note |
|---|---|
| 2026-06-04 | EU AI Act Article 10 — data-governance requirements for Chinese AI companies |
| 2026-05-21 | HD wallets — how to generate and save crypto keys the right way |