Craig Stuntz
Columbus, OH
https://www.craigstuntz.com
My interests are math, compilers, provers, fuzzers, security, formal methods, quantum computing, and homomorphic encryption
Employment
|
Improving / Director of Consulting
|
Jan 2014 - Current
|
|
At Improving, I both consult for our clients and I work to raise the technical excellence of the Ohio enterprise. I am on the leadership team and also do sales engineering
|
|
for WillowTree (formerly Dynamit)
|
- For an auto manufacturer, developed web services in Python/Chalice/AWS Lambda, and identified areas in the code which would be barriers to the business changes they saw coming in the near future
- For a textbook publisher, built an interactive training system using TypeScript and OpenAI/ChatGPT. Worked to ensure the safety of using a chatbot in this context
- For a national restaurant chain, rewrote their public web site with TypeScript, AWS Lambda functions, terraform, and C# (Optimizely CMS) code. Established a “security-first” culture within the team
- For a national convenience store chain, implemented a custom Kafka Connect Sink to replicate data from Kafka to segment.io. Hosted this on AWS EKS with Helm. I actually implemented this twice, which is a fun story too long to include here; ask me!
- For an international beverage producer, wrote Azure Functions in TypeScript to import data from Salesforce to SQL Server Azure
- For a major utility, did a complete rewrite of their web site/middle tier after two other organizations had tried and failed, using Spring Boot and Ansible
- For a national hotel brand, did C# code optimization to fix blocking production issues
- For a national hotel brand, wrote a Salesforce to Tableau data synchronizer
- Wrote an Android application and Java server for Village, an employee and customer engagement application
|
Ansible, C#, Java, JavaScript, Kafka, Kubernetes, MySQL, Python, Scala, SQL Server, terraform, TypeScript, vert.x
|
|
for Grange Insurance
|
- Wrote F# code which used machine learning and strong types to generate code and unit tests from GBs of XML, producing 80,000 lines of C# code without a single reported production bug
- Wrote a dashboard for actuaries which combined data from about a dozen different systems, including mainframes and web applications
|
C#, F#, SQL Server
|
|
Spruce Media / Software Engineer
|
Feb 2012 - Dec 2013
|
- Analyzed, designed, implemented, tested, and deployed features for Spruce Media’s web-based Facebook ad buying platform
- Supported new team members in other states
|
C#, JavaScript, Ruby, SQL Server
|
|
Vertex Systems / Application Architect
|
Jan 1999 - Feb 2012
|
- Transitioned the company and development team from Win32 legacy applications to modern web products using contemporary technology
- Wrote a DIBOL-to-DIBOL compiler in Delphi which generated code for Y2K dates, meeting an “impossible” deadline and saving the company
|
C#, Delphi, InterBase, JavaScript, SQL Server
|
|
Wayne State University Department of Physics and Astronomy / Programmer
|
1994-1995
|
- Wrote computer software for statistical analysis and simulation of results from high-energy nuclear physics experiments at BNL’s AGS accelerator
- Translated scientific papers on nuclear physics into executable code
|
Fortran!
|
Speaking
Please see my list of current presentations (https://www.craigstuntz.com/presentations.html) for full details, slide decks, and video, but here is a selected and highly condensed list of talks I do:
- What On Earth Is Quantum Computing?!? (And will it break all my encryption?)
- Shifting Application Security Left
- .NET IL: Into the Marianas Trench
- Secure Applications, by Design
- High Speed Bug Discovery with Fuzzing
- Mashing Up QA and Security
- Incredibly Strange Programming Languages
- Programs that Write Programs: How Compilers Work
- How to Use Real Computer Science in Your Day Job
- Your Flying Car is Ready: Amazing Programming Tools of the Future, Today!
- Cloud Security, For Real This Time: Homomorphic Encryption and the Future of Online Privacy
Selected Projects
Iffy-SAT
The world’s sketchiest SMT solver. A work in progress!
Fizil
https://github.com/CraigStuntz/Fizil
A fuzzer for .NET applications written in F#. Does in-memory instrumentation of unmodified binaries.
TinyLanguage
https://github.com/CraigStuntz/TinyLanguage
An educational compiler, demonstrating lexing, parsing, AST generation, type checking, optimization, and code generation, written in F#.
Fantam
https://github.com/CraigStuntz/Fantam
F#, purely functional port of Bob Nystrom’s Bantam Pratt Parser example.
Cryptopals
[Source code on request]
Working my way through the Cryptopals challenges, writing source in F#.