$ whoami Robert Prast
Independent researcher on vulnerabilities, agents, and philosophy of the machines we are increasingly letting think for us.
[ engineering ] [ adventure ] [ curiousity ]
Last Humanity is my research lab to explore new ideas, share my insights, and be devoid of outside influence. This is fully unaffailiated with my day job in any way. I have been hacking all my life for the sheer joy of it. I live by the ethos of PoC or GTFO but have had to submit most of my work anonymously. Well that changed...
track record
A decade of building and breaking at scale:
- I do stuff and things in various corporate capacities. Its unrelated to this but its cool stuff.
- Active across Hackerone, Bugcrowd, MSRC, Google VRP, and Github Security Advisories. MSRC Top 100 Researcher in 2023 before stopping all public work. Have vulns across Containerd, Cert-Manager, Docker, Apache, Anthropic, Google, Microsoft, Zoom, etc ...
- Co-creator and architect of Ocular (crashappsec/ocular) an open source code scanning orchestration framework. It powers my homelab to automate millions of security scans, AI and traditional alike.
- SREcon 2022 Americas speaker on real-time threat tracking with eBPF and syscall tracing (talk, slides).
- Earlier in my career I did embedded systems and computer-vision R&D at DFRobot on AI cameras like the HuskyLens. That meant writing our own embedded C/C++ RTOS and training our own models to run entirely on-device (face recognition, object tracking, object classification for example) accelerated. At its core it was edge AI when it was starting to kick off, now I dabble at home for fun.
selected writing
- Featured author on BetterAppSec — An AI Primer for Application & Cloud Security, How Automated AI Code Analysis Can Scale Application Security, and The AppSec AI Challenge: Authorized & Intended.
- Featured on funreliable for a container side channel.
- Early career work — Detecting SQL injection with Pixie & its New Relic counterpart, catching injection attacks at runtime with eBPF.
find me
The fastest ways to follow the work or get in touch: