Aditya Saligrama

What better April Fools’ Day prank for a group of security researchers than a fake lawsuit threat?

The question of how much CS curricula should focus on theory and fundamentals versus practical applications ends up being the broken record of Reddit and Twitter CS discourse every few months.

This is the third post in a three-part retrospective on teaching CS 40.

This is the second post in a three-part retrospective on teaching CS 40.

This is the first post in a three-part retrospective on teaching CS 40.

I acquired my personal domain saligrama.io in August 2018, and since then, I’ve used a number of different providers to manage its DNS records as well as the hosting infrastructure hanging off of it.

Ever since I started exploring security more deeply, I’ve been asked countless times by people if I could hack into grading systems to change my (or, more often, their) grades.

In my last post, I covered the marvelous world of Firebase database spelunking: when app developers misconfigure their Firestore security rules, the resulting ability to perform unauthorized data accesses can lead to terrifying data breaches for those app…

By shifting the data authorization and access restriction burden from robust programmatic systems running on a server to static security rules, backend-as-a-service platforms like Google Firebase put new app developers and their products at risk of catast…

This morning, an EternalBlue-vulnerable machine used for testing for Stanford’s Hack Lab course accidentally given a public IP address on Google Cloud was unsurprisingly pwned and used to launch further EternalBlue scanning against other public web hosts.

This is a continuation of my previous post about upgrading personal security.

I’m someone who’s been reasonably technical for a long time, but was not really interested in security until about a year and a half ago.

Test post for this blog.