Born in Saigon and grew up on the Internet, I'm a security engineer, most well-known for contributing to the discovery and fixing of SSL attack trilogy BEAST, CRIME, and POODLE.
I was a security and cryptography lead at Google for 12 years, where I helped attack and defend thousands of product launches. My team created Google Tink and Project Wycheproof.
I'm now part of Calif, a boutique consultancy specializing in red teaming and security engineering. We’re hiring: https://offsec.calif.io.
Notable awards:
* Pwnie Award 2011 for Best Server Side Bug
* Top Ten Web Hacking Techniques of 2010, 2011, 2012, 2013
* Feats of Google Engineering Award 2017, 2019
