Porting would also be a potentially helpful way for me to understand some of the concepts.
Yes, the whole thing is at experimental stage right now and as you may guess from the title of the post I'm more concerned with the physics than anything else. Thanks for the pointer to a better library - it's the first time I even parsed XML and was happy to stop with that class as soon as I got something that worked. Glad you spotted the generative sound.
As for the cert: it _could_ be stolen.
Least flak wouldv'e been a github repo. Most people wouldn't even bother check what's in it and if it matches a binary download, they'd just assume someone else would check ;)
I bet the XML parsing and the sound synth are exactly the two things you're least and most proud of? :D I honestly recommend taking a look at JAXB. You start from a schema description and generate java classes from it. Then you just stuff these classes and a conforming XML file into a JAXB Unmarshaller and get a clean instance tree of the file. Such a tree can then be poured back into a file by way of a Marshaller.
Alas there are a few things to not be proud of in the code, but I'm proud I got it working enough for hundreds of people to play. The synth ... meh ... I had higher hopes for that part, but it turned out to be a lot harder than I imagined, and it's honestly a bit of a hack that doesn't truly represent the wavefunction to my satisfaction. I had to prioritize making it bearable to listen to. Audio is hard (I've worked in that field as well).
Re: multiple account breaches: keybase.io aims to make that harder. Have you heard about that? (I know, I digress, sorry.)