Education

Stanford University 2008 - present

  • Master's Degree, Computer Science [on leave]
  • Bachelor's Degree, Computer Science [2008 - 2012]

StartX Sep 2012 - present

  • Innovator in residence (IIR) at Stanford's startup accelerator program.

Companies I Founded

PeerCDN Mar 2013 - Dec 2013

Projects

I enjoy making software. Read my latest code. Here are some projects I built:

Study Notes 2006 - 2008; 2013

  • Used by 300,000 students each month.
  • Originally built when I was age 16. Revamped in 2013.
  • Offers free study materials to high school students taking AP classes and preparing for SAT and ACT exams.

Instant.fm 2011 code

  • Create and share music playlists with your friends.
  • Built in 3 months, with friend Jake Becker, as Stanford senior project.
  • Read about the technology we used to build the site.

YouTube Instant 2010 code

  • 1,000,000 visitors within 10 days of launch, and personal job offer from YouTube CEO Chad Hurley. [Read more]
  • Featured in New York Magazine, Washington Post, NY Times, San Francisco Chronicle, Mashable, Engadget, TechCrunch, Fast Company, All Things D, VentureBeat, LifeHacker, PC Magazine, etc. [Read more]
  • Built in 3 hours using YouTube API and JavaScript.

iBoard 2010 unreleased

  • iBoard was a multi-user drawing app that let people from anywhere in the world draw together in real-time.

FreeTheFlash Entertainment 2004 - 2006

  • Built when I was 14.
  • 3,000,000 page views and 600,000 unique visitors in 2006.
  • Featured 100s of user-submitted Flash animations, games, soundboards, audio, and videos.

Work Experience

Yahoo — Software Engineer Dec 2013 - present

  • My company, PeerCDN, was acquired.

Stanford Computer Science — Teaching Assistant Winter 2012

  • Taught computer science to students in CS107: Computer Organization and Systems.
  • Held office hours to complement professor's lecture, graded assignments, tutored students in a "lab" setting, and held regular office hours to live debug student's programs.

Quora — Software Engineer Intern Summer 2011

  • Developed and launched the embedded video feature.
  • Ported lots of Python code to Scala code.

Facebook — Software Engineer Intern Summer 2010

  • Developed and launched Facebook Groups to 500 million Facebook users, on a team of only 5 engineers in 4 months.
  • Implemented new HTML email design, incoming email handler, and member management UI.
  • Facebook Groups offers users a shared space to share stuff, chat, and keep in touch with small groups of friends.

Stanford Computer Science — Section Leader Jan 2009 - Dec 2011

Intel — Web Developer & Videographer Summer 2007 & Summer 2008

  • Worked at Intel in high school, for two summers
  • Built an internal video portal to improve manager-employee communication (major Intel IT initiative)
  • Built web app to help engineers quickly create customer support tickets from large error report database
  • Redesigned internal IT website to improve usability

Research

FillDisk.js — Proof of Concept Dec 2013 code

  • Demonstrated an attack that allows any website to have unlimited storage space on a visitor's computer.
  • Works in Chrome, Firefox 3.5+, Safari 4+, IE 8+.

Using the HTML5 Fullscreen API for Phishing Attacks — Proof of Concept Oct 2012 code

  • Demonstrated a phishing attack that can be performed with the W3C JavaScript fullscreen API.
  • Emulates user's current browser, OS, and screen size to convince them they are on trusted SSL site.

WireSheep — Original Tool Nov 2011 code

  • News Feed of activity on your local network
  • WireSheep lets you sniff packets on an open WiFi network. Instead of just stealing login cookies, like FireSheep, it lets you see traffic in realtime, like Wireshark. WireSheep shows you each user on the network and all the HTTP requests they're making.
  • Built with teammates John Heisey, Nikil Viswanathan, and Daniel Posch.

CMSploit — Original Research Nov 2011 code

  • Nearly 1% of websites built with a content management system (like WordPress or Joomla) are unknowingly exposing their database password to anyone who knows where to look.
  • Temp files created by text editors may still linger after editing is finished, exposing the configuration file and database credentials to attackers.
  • I wrote an automatic program to test for the prevalence of this issue across the wider web. I tested the top 200,000 websites and found that 0.77% of websites running a CMS have publicly-visible config files and database passwords.

Adobe Flash Remote Webcam Exploit — Original Research Oct 2011 code

  • I discovered a vulnerability in Adobe Flash that allows any website to turn on your webcam and microphone without your knowledge or consent to spy on you.
  • It uses user interface redressing (clickjacking) to trick the user into doing a series of four clicks which remotely enables their webcam.
  • The exploit was covered on CNET, Wired.com, The Register, Ars Technica, Gizmodo, PC World, Yahoo! News, ZDNet, The Inquirer, and Computer World.

Automatic Retargeting of Webpage Content — Stanford Computer Science — Human-Computer Interaction Lab Summer 2009

  • We built an application for casual web designers to explore possible designs for their website.
  • The designer selects a site they like and they can apply it's page layout and styles to their own site.

Organizations

Stanford Association for Computing Machinery — President 2008 - 2012

High School Website Team — Lead Programmer 2006 – 2008

  • Built and maintained school website.
  • Fixed teachers' hardware and software problems for 5 hours / week.

High School Key Club — Webmaster & "Techie" 2005 – 2008

  • Helped coordinate volunteer service events for 200+ club members and produced movies/slideshows of the events.
  • Built club website (offline but mirrored; I'm keeping the site alive because of all the good memories I had in the club)

Sites I Built

I started designing websites at age 13, when I first learned HTML. Since then, I've built lots of sites, mostly for myself, but a few for organizations that I like:

AMENDS 2012

  • Stanford student initiative to help promising youth in the Middle East and United States to learn from each other, through TED style talks, and share their ideas and experiences with the world.

Hunger and Homelessness Auction 2010 - 2011 site offline

  • In 2010, we used this site to run the Stanford Charity Auction.
  • In 2011, we re-purposed it to run the Stanford Hunger and Homelessness Auction.
  • Items were donated by Stanford students, faculty, and local businesses, and auctioned off with all proceeds donated to the Stanford Opportunity Center.

Hands 4 Hope Youth 2008 - 2009

  • Youth-driven outreach organization based in my hometown.

Contact Info

Talks

WebRTC Data Black Magic Oct 19, 2013

Talk at RealtimeConf in Portland. Video:

What the Open Web Can Do for You May 24, 2013

Talk at Shift Conference in Split, Croatia.

Database Passwords Everywhere! Jan 20, 2012

Talk at Stanford ACM.

How to Start Your Company by Age 21 Feb 26, 2011

Panelist. Invited by Stanford ASES.

Going Viral on the Web Oct 29, 2010

Talk at Stanford ACM.

The Story of YouTube Instant Oct 18, 2010

Invited by Stanford ASES.

Web Security at Stanford Jan 29, 2010

Talk at Stanford ACM.

Hackathon Wins

Yahoo Hack Day — Winner Feb 2014

For building something related to video (unreleased, will update if released).

Stanford Hackathon — 1st Place Jan 2013

For building cctv.js, a way to watch live visitors using your website.

Stanford Hackathon — 1st Place Nov 2011

For building WireSheep, a tool for spying on your network's HTTP traffic in a pretty News Feed format.

Greylock Hackfest — 2nd Place Aug 2013

For building Oculus Drone, which lets you pilot a Parrot AR Drone with the Oculus Rift virtual reality headset! Mad science!

Stanford Big Hack — 2nd Place Apr 2012

For building Fling, an easy way to send songs, videos, and links from mobile to desktop.

Awards

.Net Magazine Awards — Finalist Nov 2011

Nominated for:

2010 Person of the Year Jan 2011

Awarded by Sacramento Magazine.

Math Steeplechase, 2-time winner 2005 - 2007

EDUHSD team competition. Results:

  • 1st place—2007
  • 1st place—2006
  • 3rd place—2005

In the News

FOX 8 Cleveland May 2012

"Hackers Gain Access to Homes Through Webcams" This report is lol-worthy. Just sayin.

PandoDaily Mar 2012

"Top 5 Stanford CS Students You Should Know"

The PhenomList Jan 2012

"Feross Aboukhadijeh"

New York Magazine Sep 2011

"Bubble Boys"

CNN (TV interview) May 2011

"Hiring Spree in Silicon Valley"

All Things Digital Apr 2011

"Instant.fm Launches Today"

Sacramento Magazine Jan 2011

"2010 People of the Year"

NBC (TV interview) Sep 2010

"Instant Success"

More Speed Hacks

MD5-Password-Cracker.js

Crack MD5 passwords with JavaScript Web Workers

Windows XP Emulator

Windows XP in the browser :)

Brain Grinder

Foreign language flashcards, with pronunciation.

Instant.io

Hear a word pronounced in every language.

Emu Spin

LSD and emus. :)

Languages

Arabic

Intermediate, studied 2 years at Stanford University.

Spanish

Intermediate, studied 4 years in high school.

I'm also a ...

  • long-distance runner
  • basketball player
  • music lover
  • anime fan
  • gamer
  • free software advocate

Running Records

  • 1,600m (1 mile) — 4:22
  • 3,200m (2 miles) — 9:43
  • 5,000m (3.1 miles) — 16:19
  • 10,000m (6.2 miles) — 43:12