Our graduates go on to achieve remarkable things. Here are some of their proudest moments in production environments worldwide.
Class of 2023 alum demonstrates the extraordinary longevity of ordinary credentials, quietly reading airline reservation data for 1,140 days until a booking provider mentioned it to anyone.
Class of 2026 graduate chose a uniformly random 384-bit number so efficiently that a national certification authority has since left the certificate business.
Class of 2024 alum demonstrates that one plaintext admin token with no expiry can outlive two security incidents, three cloud providers and the hosting platform that issued it.
Class of 2017 alum demonstrates that four carefully misplaced bytes can turn unprivileged Linux users into root across mainstream distributions.
Class of 2022 alum demonstrates advanced delimiter studies by letting one crafted push option reinterpret GitHub's internal security metadata.
Class of 2023 alum demonstrates advanced feature-flag incompleteness by letting multi-PR squash merge groups quietly undo earlier pull requests.