Stanford's youngest instructor on InfoSec, AI, catching cheaters - Rachel Fernandez [Podcast #217]

💬 Chat with this Video
Ask anything about this video…
Welcome back to the freecodecamp podcast. I'm Quincy Larson, teacher and founder of freecodecamp.org and today I'm interviewing Stanford's youngest instructor, Rachel Fernandez, a 19-year-old student who also teaches their C++ course. First, some quick community news. Freecodecamp just published an automation for beginners course. You'll learn how to automate your daily routine tasks by piping together triggers and actions and by the end of this course, you'll have your own model tech context protocol MCP server that you can share info with between your productivity apps and your agents. That's a 4-hour course on the freecodecamp YouTube channel. Link in the description. Watch it after you finish listening to this podcast. Freecodecamp also published a full-length handbook on data quality. You'll learn the most common ways that bad data enters the system and how to prevent them. You'll get exposure to the different layers where data validation needs to happen, front end, back end, database, business logic, data ingestion. This handbook will also walk you through testing strategies to keep bad data out of your projects. AI governance may sound like something that only managers need to worry about, but in practice it's us developers who actually have to build the responsible AI systems. You can bookmark this new freecodecamp handbook and code along with four hands-on Python projects, a model card generator, a bias detection pipeline, an audit trail logger, and a human in the loop escalation system. This is a full handbook. Link in the description. This week's song of the week is Dans le noir by L'Impératrice by a French disco band L'Impératrice. Sorry, I'm not a French speaker. I hope I didn't totally butcher the name. This 2024 banger features a heavily syncopated bassline that I think you'll love and the singer subtly alternates between French and Italian. The music video is unique as well and has super good vibes. Think you're going to love it. Support for this podcast comes from the 10,118 kind folks who donate to our charity each month. Join them and support our mission at donate.freecodecamp.org. You can also pick up a shirt like the one I'm wearing. shop.freecodecamp.org. $20 with free shipping anywhere in the US. Now for the interview. I'm hyped to talk with her, Rachel Fernandez. She grew up in Westminster, a small California town with a largely Mexican and Vietnamese population. 70% of the students at her high school had family income so low that they qualified for free school lunches. And Rachel was the first student from there to get into Stanford in years. We're going to talk about the state of computer science education in 2026, Rachel's thoughts on C++, a language that she teaches at Stanford, and why she thinks it's still important, and her tips for how devs should go about using AI tools without deskilling themselves. Rachel and Fernandez, welcome to the free code camp podcast. Thank you so much. I'm so excited to be here, Quincy. Yeah. Well, I'm excited to ask you a whole bunch of questions. First, I want to talk a little bit about C++. You teach Stanford's C++ course. How important is C++ to the software ecosystem right now? Well, I think it's it's incredibly still important. I think there's a lot of push right now to go to programming languages like Python, right? These have become very popular recently. Um a lot of the the startups and companies that I talk to are are writing in things like Go and Python. Um I still think C++ is incredibly fundamental to be honest though. I mean, a lot a lot of really really big things have been written in C++. And so, I mean, in terms of uh low-level capabilities, in terms of systems, and and infrastructure, I think C++ still has a major part in in the industry. Um uh I can think of things like uh I think the next honestly big thing um outside of like the AI boom is is robotics. And I think uh particularly like C++, like low-levels low-level stuff like this in in systems things, kind of like robotics, still need programming languages like C++. And there are still tons of issues and bugs with it. Don't get me wrong, but it's still incredibly important just because so many of the things that our industry is built upon, the foundations of it is C++. Yeah, so like Windows for example runs C++. Like Python and JavaScript even if you're programming in those, you're under the hood C++ powers like their engines and stuff like that. Yeah. So right now there's a crisis in C++ around memory safety, memory corruption, timing errors, and other exploitable issues within the language that have just been there for, you know, 50 years or so, 40 45 years, however long C++ has been around. And you actually had the C++ creator, the creator of the language, visit Stanford and speak at your class. And one of the things he said in the past is he's imagining type safety, resource safety, memory safety, range safety, arithmetic safety, that they could all be standardized. How confident should people be that C++ will continue to be a secure language worth learning and building with? And I know that you work at a startup that's focused on security. So this seemed like the perfect question to be asking you. Yeah, absolutely. Um Bjarne was awesome when he came to come visit us. Uh the yes, yes. I think there are a lot of security issues with C++. And honestly, this is like one of my favorite parts of the language is that you're kind of just given like full reign of the programming language and in terms of like memory access and and stuff like that. Um but I I think people should still be fairly confident that the language itself is going to be safe and it's going to be continuedly used within within industry. Um the fact that like Bjarne is still talking and still making improvements to C++. It makes me feel fairly confident that I mean, I think he knows the gravity of the situation of just like so many things are built in C++. And I there's been kind of a push recently to like use other programming languages like Rust because of I think they have higher features and and more security um implemented within it and that you're I guess given less free rein in terms of like memory access and things like this. But I mean there have been pushes made to make C++ more secure, things that you'd mentioned in that in that snippet that he had said, but things like profilers and then modules and static analysis, like all these things are components that are being built up right now for the programming language. And the fact that there's a push for this and the fact that Bjarne is so vocal about it, I think it makes me feel better and it makes me feel safe that this this language is going to be continuously used. Um and then the context of security, I mean a lot of the a lot of the code that my the the companies like I work at, um they're either doing pen testing or they're looking at like LM generated code. Um the security is not really looking at the low-level stuff, but I think that fact is like kind of scary upon itself. Like all the languages that that are all the code that, you know, we're looking at in terms of like AI generated code, right? It's all built on the fundamentals of of C++ code, right? And so if we are looking at all this, you know, AI generated code and it's built on something else, let's make sure that thing that it's actually built on is secure. And I feel fairly confident that a lot of people within the industry recognize this and realize this and there's been a greater push to focus on security, um especially within the past few years just because of all the AI generated code. Um people are just outputting a lot of code that they honestly genuinely don't understand. And so I think people are more cognizant of the fact that that the code that they have to write has to be secure. Um or else a lot of big things like infrastructure are going to go down. Yeah. And a lot of people like blame the uh you know, AI assis- assistants code generation. They'll they'll they'll take like the code base, but would you say that it sounds like maybe some people should actually look at the underlying software and maybe the software was always vulnerable in certain ways that are just now being discovered and you can't necessarily just blame LLMs for introducing so much insecurity. Yes, absolutely. Absolutely. I think wait, I mean there's there's a lot of there's a lot of bugs within C++ code. There's a lot of things that need to be fixed and a lot of things that need to be changed. Um I think if you're if you're writing like web dev stuff, there's not a need for you to go down to the systems e-type of uh material, but no, absolutely. I think um there's there's a lot of issues with a lot of code being written right now. Um but systems code I think is always just first off fun to look at. Um and yeah, there there tons of bugs and memory leaks and things like this um within the foundations of a lot of code that is being written. And so um yeah, I I do think it's still important for for developers to be looking through that type of code. Yeah. Well, let's talk about TreeHacks, this massive hackathon at Stanford, which I was there. I made a documentary about it. You interviewed me. It was a lot of fun. You interviewed Sam Altman from OpenAI. Uh you got to put together this entire event. Uh it had a million dollars in prizes, a thousand uh devs selected from 15,000 applicants. Uh and I mean it sounds like a massive undertaking. Can you fill us in on the history of the hackathon and how you got involved? Absolutely. So, this is this is the 12th year of TreeHacks, which is really exciting. I feel like it has grown so so much um from where we first began just not even like I guess a little bit more than a decade ago. Um it started off as as this thing that I think uh these these three friends decided, you know, we should have a hackathon at Stanford. Like let's just build one. Um and the founders come back every year and they talk about how much the event has changed. Uh but yeah, I think I think hackathons have become an an even bigger thing just as of recently, especially with AI boom. Um but yeah, this is our 12th year of TreeHacks, and I think it was the best one that we've had so far. Um and in how I personally got involved in it, I uh I actually I did a lot of logistics stuff in high school, so I was the logistics director this year for TreeHacks, and I organized the event last year, too. Um but I took more of a leadership role this year. Uh so, when I first came to Stanford, I I heard about this club, TreeHacks, and it's quite popular here. A lot of people want to help organize the event just because of the grand scale of it. Um and the community is is really great as well. And I I was I was around club fair, and I I saw this booth, and I just like I I was too scared to go up there. There were too many people asking questions. I was I was being with my math problem sets, and and someone had told me about the logistics behind the event. Um and so, I I went to a very I went to a very poor high school in that I remember for our robotics team, like we would we would struggle to raise like even $100 like doing a bake sale outside like an Albertsons or a Vons. And so, I I'd heard about the grand scale of the event, right? It's like a big budget. And I think that really drew me to TreeHacks, the fact that like any idea that I wanted to have, any thing that I wanted to see implemented at TreeHacks, and any big scale impact that I wanted to have could be done with TreeHacks and the and just the scale of the budget and the size of the event, right? >> budget is phenomenal. Like you said, okay, for people outside the US, Albertsons and Vons are like grocery stores. So, you would like bake a bunch of goods, like cookies and stuff, then you go, you set up a table in front of this grocery store, and you try to get people to buy your cookies, and use that to raise money to buy like Arduinos or other robotic stuff, right? Like Yeah. And to go from doing that to Stanford's budget, which I don't know if we can publicly reveal the budget for TreeHacks. Uh I know what it is. It's massive. Uh >> Yes. I like I mean, you talk about doing logistics. Maybe you can compare doing logistics in high school for robotics club to doing the logistics of TreeHacks. Thousand people, like tons of security, tons of uh you know, just like the buildings, like renting the actual auditorium where you had to interview Sam Altman. Like that was not free. Like there there was a lot involved in this process, and you had to manage a lot of money and a lot of people along the way. Maybe you can just take a moment to compare and contrast your high school experience versus Stanford. I think in in high school a big part of it is you have to sell people on what whatever you're doing, right? For for the robotics team that I worked on in high school, it was like you you want to support us, right? Like we're like these low-income kids that are like building robots and I think that's great and we have so much passion and energy and so much of the time that we had spent fundraising was convincing people you want to invest in us. And I think that's really hard. Like why would companies that are struggling, right? That I mean it's it's been hard I think financially for a lot of people as of recently. Um why why would you want to spend your money, right? That your company makes to come sponsor this tiny robotics team that that hasn't won any big awards or anything like that, right? Um and then I came to Stanford and it was just like let me give you money. Like let me sponsor this event. I mean we have so many really big sponsors um part of the event and it's wild like I I came into this position and it was it was suddenly so much more freeing. Like it was we have this huge budget. Literally anything you can dream of you can make it happen at TreeHacks. And so I remember last year I just I threw out the idea of uh can we bring llamas to TreeHacks? It was a complete joke. I I like didn't think anything of it. I was like oh it's going to be expensive, right? And the the guy that came with the llamas was from I think Central California so he'd have to drive all this way up. And someone was just like yeah, we can make it happen. Like let's do it. Um and so I think llamas has kind of become a tradition at at other hackathons as well and we had llamas this year at TreeHacks. Um and yeah, I mean running this this huge budget and this huge event has been I think one of the greatest things I've ever done in my lifetime and in the TreeHacks is honestly one of my favorite weekends I think of my whole life. Um it's incredible to be able to build this event that make that makes other people really happy. Um but yeah, it's it's a lot lot work in terms of logistics. Just I don't think I This is like the first event I've ever planned at this scale and I think there's just so many tiny things that go behind making an event like this that like you just like you never recognize until you're actually the one doing all the planning. Um but I feel very lucky in that I think a lot of hackers really enjoyed the event and a lot of them actually noticed a lot of those tiny things. And so I think that means a lot to me in terms of of planning this event and and all of that was totally and completely worth it and I think it was one of the best things that I've done here at Stanford. Yeah. Well, I had a close encounter with one of the llamas and I guess I have to thank you to thank for that. That's going to be in the documentary. Took a big ball like fistful of feed. It just went crazy for it. They are wild animals. Let's put it that way. And I got to brush one too. Uh majestic animals really. So um like So high school, it sounds like you were just very resource starved and I want to get into kind of like your your background because it is novel like it's it's not common. Uh you were the first person from your high school to go to Stanford in years. And I think you said like out of your graduating class you had one other person went to like a prestigious school that would be like Yale. Uh but but like that's not where most of the people at your high school were aiming. They uh they were I guess less ambitious than you were to an extent. Like like can you talk about um what it was like at your high school in um Westminster, California which is in Southern California, population of 90,000 people. Kind of a small uh town. Is Is it on I don't know a lot about it. Is it on the coast or is it like a valley type town? Where is it exactly? Um if you know around like the beachy areas of Southern California kind of like Newport Beach, Huntington Beach, it's about like 15-20 minutes away from there. Okay. >> Um yeah. Yeah. Uh yeah, Westminster I I I owe a lot to I think where I grew up and and that being Westminster. Um it's a very immigrant heavy town so there's a lot of like uh Mexican and Vietnamese immigrants there. Um, my high school in particular was it was it was full of a lot of students that I think came from backgrounds of poverty and a lot of families that couldn't really afford to be living in Southern California to be honest. Um, and I think for me going to a high school like that really transformed the way that I view education that I value it so much more. Um, I think when I when I entered high school it was I mean a big part of it was I grew up with people like this and I saw that if you took the opportunity in terms of education to really really push yourself that you could escape this level of poverty that I saw so many of my classmates um, grow up in. And so I think for me it was it was all the way throughout high school. I would always push my classmates to be like, if you could just try a little bit harder in this class, right? Maybe your GPA could be a bit higher. Maybe you could get into a better school. Um, but a lot of the students at my high school were just not motivated to be honest. I think there was a small group of students that were interested within STEM. That was maybe like a hundred of us and so because my high school was was low income our district had allocated us more money in terms of like a STEM program. Um, and that was a great opportunity. I think it ended up leading me to come here to Stanford and and really taught me that I like to computer science, but so many of my classmates just had absolutely no motivation to to do well within school and I I think it's a it's a cultural thing and that that's just something that they weren't pressured to do as kids, but it really frustrated me that like there were so many opportunities for them to grab on to that even if they took one thing, maybe they could get into a better college, right? Like secure a better future. But I think more so than that, I saw that a lot of my classmates just had no passion for anything in particular. Like a lot of what they did just it was just kind of hanging out after school and like I think there's nothing wrong with that, but it just really killed me that there were a lot of my my classmates that could have done fantastic and incredible things and were truly, really talented and smart and just had no internal motivation to do anything within school and find anything that they were like particularly passionate about. And I think that shaped a lot of my experiences in terms of being very grateful for any opportunity that was that I was given, especially at Stanford. I feel like I've tried to take on anything that was given to me just because I don't know, I kind of FOMO in terms of I don't want to I don't want to fall not fall, but like I want to keep that internal motivation going on within me. Yeah. Yeah. So, FOMO, fear of missing out. Um Yeah. You don't want to be caught slipping, so to speak, where where you're like resting on your laurels. Like, "Oh, okay, I got into Stanford. I ran this hackathon or I accomplished this or that." >> Yeah. Uh that's cool. But, I guess one question I have is like there there's like the the parable of Icarus flies too close to the sun and his wings melt and he falls into the sea. And then his his dad, Daedalus, "Oh, I should have like helped rein in some of his ambition, I guess." Like you are in like the most ambitious perhaps part of the entire world, all right? Like Palo Alto, San Francisco, uh Bay Area, right? Like you have like ambition is specifically something that is selected for. Uh if you read the books of like the the various like you know, I guess air quotes luminaries. Again, I don't want to sound overly critical, but but I mean the people out there that are, you know, taking all the money and giving it to the kids coming out of Stanford and getting them to you know, ram into the wall as hard as they can with their idea to see who can break through, right? Yeah. Um Like, how do you kind of strike a balance between having that level of ambition that has gotten you where you are today without maybe going over where overboard and like burning yourself out cuz I know that that happens. Had lots of friends who've kind of like cracked so to speak and just you know like gone to farm goats. All right, as they say about developers when they when they have you know edited a few too many lines of Java they go farm goats, right? Or maybe or maybe llamas. How do you strike that balance yourself? Absolutely. I think I think in high school I I definitely was very burnt out. I think there was this expectation that I put with on myself that like all of this has to be worth for something great. And so I just kept pushing myself and pushing myself and pushing myself until I came to Stanford. And I think when I when I received my acceptance letter at Stanford, I find that was like my first sigh of relief that like all of this was worth it, right? Like I pushed myself to this point and I can finally breathe, right? And I think that I haven't felt that level of burnout that I did from high school to be honest and for quite a while. I I don't think I've even experienced it here at Stanford. And I think if you talk to a lot of Stanford students, to be honest, I think a lot of them will tell you that Stanford's in some ways feels easier than high school and I think it's also that like we all just went through so much in high school that like obviously we look back and and we don't think it was as bad as it actually was. Um but I feel like the classes here are very manageable. But there's definitely an expectation at Stanford in particular. I feel like compared to other big schools like MIT or Caltech is that you have to be doing everything. I think if you go to talk to other people at more like researchy heavy schools, a lot of what they're just doing is classes and research. And that's great and that's like awesome for them. Um but at Stanford there's definitely a culture of you you have to be like founding something. Like you have to be talking to venture capitalists. Like you you have to be also like having a 4.0 GPA in all your CS classes, right? Um you also have to be doing research. And I think that that expectation that you have to be doing all these things is what drives a lot of people to burn out especially like especially at a school like Stanford. Um And so I think for me in particular the burnout is kind of fun in that like I really really just enjoy making myself busy and pouring myself into things and people that I love. And so I I don't think I've experienced that burnout just because of the community of the people here. Like I think everyone here is working very hard towards something that they're passionate and really ambitious about and I think that's very inspiring. And whenever I feel sense of I'm getting overwhelmed, I can fully and completely just talk to other people about this, right? But I think like pouring myself into things that I that I truly love has helped prevent the burnout in that I feel like I'm not doing things for the sake of like getting into college like I kind of was in high school. It's more just like this is like for example TreeHacks like that was I think one of the busiest and most stressful times of my entire life. For the past like 8 months we've been planning this hackathon and at least like the 2 months leading up to it I feel like I was working on it at least like 7 8 hours a day. And the week the week >> That's a lot. On top of all your studies. Like like you had this weekend and it's not like you're you got like some pass to not have to study for exams or something, right? >> Yes. I'm still It was on top of your entire academic and of course you mentioned you're working at it like a security company out there. Yeah. Um I'm also part of like the security teams here and and I I lecture on the side as well. It's a lot of work, right? Um but I I just I like love I love doing these things. Like if I think if you talk to any of the organizers from this year I think if any if you ask any of them like you saw Rachel being very stressed out and very like she was she was just kind of losing it at some points. I think all of them would say like it's just because she's so passionate about this. Like there's I would never ever take back the time that I took doing TreeHacks and and all the stress that I went through because number one I got great stories out of it and I feel like I grew a lot as a person, but I just genuinely adored it and I when the hackers were coming into the the building that we hosted TreeHacks in and just getting to meet all these people that I feel like I've worked so hard for. Like I I always knew that a thousand people are going to come to this event and then finally actually like meeting them and being like I put all this work and effort into this event for someone like you who's also worked really hard to get here. It's the most fulfilling and heartwarming thing ever. And and even when I teach at Stanford, it's also a lot of work, right? Like I lecture my own class. Um I handle a team of graders. I make my own assignments and and lectures and that takes up a lot of time and effort, but I just adore teaching. I love that. And so I think for people that are struggling with burnout especially at school, um it's very possible for you to pour yourself into things and still get burnt out. I think I felt a little bit about that after TreeHacks, but finding things that you're genuinely passionate about and then finding community within that, I think is so important to maintaining kind of like your self-composure and ensuring that when the stress gets there, you have people to talk to. And the stress comes from I guess kind of a good spot because you you genuinely just love doing the things that you're choosing to do. Yeah. Well, I have a question about that because you know, you mentioned that this, you know, high school run-up to college was an extremely burnout inducing experience for you and that once you got to university it's actually a lot easier. Yeah. >> like you could kind of take a breath and it wasn't quite as uh crunched. Yeah. >> But um and I've heard that from a lot of people in a lot of different cultures. Like people from India, people from China, uh people from Europe. The the actual process of getting into university is often way harder than actually going to university and succeeding in an academic setting like that. Uh Stanford has a very low acceptance rate and it's very difficult to get in. Uh can you like there are probably some parents listening to this, there might be some high schoolers listening to this that would love to go to a school like Stanford that opens so many doors uh industry and and offers like awesome experiences like TreeHacks to people who attend. Uh what can you walk us through like that process of getting into Stanford and uh like all the different things that you had to do along the way and like theories of why they accepted you as opposed to other people like was it based on your robotics club work things like that like anything you can give us that would be useful to people who are thinking about either having like attending Yeah. you know a selective institution like Stanford or um and and you mentioned some aspects where Stanford is even like more hardcore or more um than like MIT and Caltech and other like hardcore engineering schools. >> Yeah. Um particularly because of like the connection to Silicon Valley and like the venture capital ecosystem and like all these giant tech companies that are based uh you know within a few miles of where Stanford is located. Uh like people who don't already know this like Google came out of Stanford. Um you know like like pretty much all the big tech companies like Yahoo was like right in the area like I Sun Microsystems was right in the area like a lot of the important companies throughout kind of tech history have been like in that general vicinity. So again to to stop giving you context and just to to ask the question again how do people get into a school like Stanford and what was your experience? Absolutely. I mean I I get asked this a lot even from where I am from home just because not a lot of people are exposed to big schools like Stanford and and it's not very common for someone to get into a school like Stanford. Um There are a lot of different reasons as to why I think I could have been accepted. I think Stanford used to They actually used to let you read your application and see what your your admission officer would would say about your application. Um they unfortunately removed that which I was I was very devastated to hear about. I think honestly a big big part of it is passion and I think that's like such a generic thing that people will say is like oh you have to be passionate to like get into college. I think it's true and honestly I think it is a bit unfortunate in that like I think I was very lucky to find very early on that I like to computer science my freshman year of high school is when I first discovered teaching and I first discovered cybersecurity and that's when I knew that I I loved CS and I wanted to keep pursuing it. Um but I have a lot of classmates that like didn't they didn't know what they wanted to do until like their senior year of high school. And for some of them like they still don't know what they want to do, right? They're at community college and they're trying a bunch of different things. And I think that's fantastic. I think everyone takes college at their own pace and for some people this environment is not what they need to grow as human beings. Um but quite honestly I I do think passion plays a very very large part of it. I think uh when I was when I was approaching this whole college applications thing, I think a big part of it was should I focus on one particular thing throughout high school or should I be like a generalist and trying a bunch of different things? Um I think for students in high school, they should just try whatever they're interested in. The way that I first approached high school was I did not want to go to Stanford. It was actually I wanted to go to like a small Cal State in California when I first came into school because this is kind of what my parents had impressed on me um when I was younger, but when I came to high school I knew I will never have the opportunity again in my life to just try a bunch of different things for free and just see what I like and what I don't like. And at the time I like didn't really know what I wanted to do in terms of like career or what I wanted to major in in college. And so I tried a bunch of different things. And that's how I ended up finding about CS. Um I think that's the right way to approach high school. I think there's a lot of societal pressure and a lot of external pressure to get into schools like Stanford, but honestly just try whatever you like and see what you're passionate about. And once you find what you're really truly passionate about, just go deep into it. And I think the question of should I go into one niche specific thing to get into college or should I um you know, should I be more of a generalist? I don't think that's really the question that people should be asking. I think it's more what are you passionate about and what have you been doing to work on this? Um I think a lot of people make things for the sake of doing things for college and I would very much recommend not doing that. Um for the first reason is that if you pour your time into something in high school, uh for example, a lot of people make like non-profit education things in in high school. Um and there's absolutely nothing wrong with that if that's what you're passionate about. But a lot of people that I have talked to are just making them for the sake of saying that like they tutored X people in X amount of things, right? If you are making things for the sake of making things for college, let's say you don't get into your dream school. That time that you would spent towards something that you weren't truly passionate about is time that in my opinion was kind of wasted, right? And I think high school is such a great opportunity to meet awesome people and try new things. Um and so I think you should honestly genuinely find something that you're passionate about and just dive fully and deeply into it. Um and when you're writing your college application essays, I think I always encourage people to just like write how they speak. Um I'm someone that just like speaks, I think, very like passionately, and I feel like it's it's very easy for me to talk about things that I'm excited about. But I think a lot of people get like scooped up into the it has to sound formal, it has to sound all these things. I think when you are applying to big schools like Stanford, especially like the Ivy Leagues, they want like the human part of They want like the raw part. Like it doesn't have to sound like an interview when you write your application. Um and so you really want to just find what you're passionate about, and you want to write about it, and you should write about it in a way that like it doesn't sound fake when you talk about it because you genuinely are this excited about this. Um and if you if you haven't found that passion, that's totally okay. Just try different things and see what you're interested in. Um and I think for CS, this is something a lot of people want to major in, right? Um and so when I was approaching CS, right? Everyone applies for CS at Stanford. Stanford is I think it's like 50% of the students here end up switching or came in as CS. And Stanford is great in that like you can switch your major as many times as you want, and they don't It's not impacted. I think that's what other universities call it. Um so when I was writing my Stanford application, think this is the biggest tip I give to people is you want to find what makes you so uniquely you. There are just so many other applicants that have the same stats as you, right? Like they have a high GPA, and they did this and this and this, and they did research and all these things, and they have all these big awards. But, what makes you uniquely you? And I I think a lot of people on their college applications will write, "Oh, I want to be I want to be at Stanford because I'm doing like they have this program for me, or there's this professor I can do research with." Um That's great, no. And I'm I'm very youthful. It's like great that you know what you want from the school. But, the entire point of your college application is you need to sell yourself to the school. Why should this school accept you over someone else? And this is the entire mindset that I had when I was writing my Stanford application. Um and I think that I think that helped me a lot. And so, I thought about what unique characteristics do I bring as like a human being to Stanford and and to the culture and to the community. Um and I would recommend writing like very niche topics in in your in your application. Try to be Try to talk about the most unique stories that you have and and what makes you so special. And especially if you're particularly passionate about something, which I I think you should be if you're applying to a school like Stanford, talk about that. Um and I would say try to be as I guess like emotionally raw as possible without making it too crazy without I guess like crashing out over um the any application or anything like that. Um yeah, I think you just I think I admission officers just they want to be sold on why they should pick you for a school. And I guess I can talk about for me in particular, I don't know how helpful this is. Uh a big part of my growing up is that I'm mixed. I'm Spanish, I'm Vietnamese, and I'm Argentinian. And I'm a girl with a computer science, and that's not something that people often talk about. But, there's other people like me, right? And so, when I was approaching CS, a big part of what I loved doing in high school was teaching. And so, a big part of my application was I thought, "Okay, every other person that's applying to Stanford for CS is going to be doing research. They're probably going to be interested in one specific niche topic within CS. Um and I was just thinking of the most like stereotypical CS person that I could think of, right? Um and I tried to recognize I like got a piece of paper and I wrote, "Okay, I'm unique in these aspects." And I think a big part of me is I just love bringing community together and I love um I love I guess a big part of my application was just bringing humanity back into computer science. And I think that's a topic that not a lot of people talk about. Um so in any way that you can differentiate yourself from other people is an opportunity that you should take and you should write about it. And um a lot of people that I knew in high school did just one extracurricular throughout high school. Um this is my hot take. I don't think that's I I think that's great if that's something you're passionate about, but I think it's hard to get into college if you do just one thing throughout high school, whether that's like band or robotics or things like this. There were a lot of brilliant, amazing people that I knew through the robotics program that I did in high school that just did robotics all throughout their time um in high school. And they did incredible things, but it's just hard to put onto paper the things that you've done for just one club. And so I think it's better to try a bunch of different things and have a bunch of different experiences on your application rather than pour your time and efforts all into just one single extracurricular. Unless you do believe and fully feel like that is the one thing that you truly love, then I think the passion that you that you get out of it and when you write about it will come through. Um but this is just something that I experienced and that like I saw so many brilliant people who just poured their time into like one extracurricular who I think should have ended up at big schools like Stanford, but when you compare that application to a someone else that has done so many other different types of things and just got a wide range of experiences, it feels more tempting to pick the person with a wide range of experiences in my opinion. Um so yeah, in terms of tips for Stanford, just be passionate, be excited, try a bunch of different things. Um and it it's it's hard to ignore the societal pressure to go to big schools like Stanford, but I I fully and fundamentally believe that like everyone who applies to college will end up where they need to be. And if that's out of school like Stanford, I think you will end up there. And if not, that's totally and completely okay, too. You'll find your own sense of community somewhere. Yeah. >> Wow. I like I took so many notes while you were talking because I I think that So, if I had to recap some of the things that you said there because I think that they are important and I think they're overlooked by people. I I mean, there's like an entire industry that like preparing people to get into these programs, especially overseas, trying to help people get like into a US university. And uh there's a lot of kind of conventional wisdom that you kind of challenge there. Uh but one thing is even though specialization is rewarded, obviously, in the workplace and and uh things like that, like in in terms of the application process, you do want to have a lot of different things so you can be able to not just list that you're like you went really hard on robotics for like 4 years, but that you tried this and this and this. >> Yeah. >> having like a general theme in your application, you said uh bringing humanity back to computer science was kind of the overarching theme. Yeah, yeah. I think a big part of of college essay writing I've read a lot of college essays and just helping friends from back home write write their essays. You need to have a story. Like there needs to be like someone um I actually this this might be helpful. Uh when you when I came to Stanford for my uh admit weekend, since this is like when I was first considering whether or not to take Stanford, um they have this thing called admit weekend and all of the people that were admitted come out and basically Stanford tries to sell you on on why you should pick their school, right? Um you meet with your admission officer in outside and under the sunny California weather. And my admission officer basically told me that the process for admissions is um someone will read your application and if they think that you're solid enough, what they will do is I think there's there's some sort of process for like weeding some people out, but um basically like the the end goal is that your admission officer wants to be able to make a presentation on you and sell to other admission officers why you should in particular be picked. And that like that blew me away when I found out. Like someone in the admissions room literally made a presentation about me and fought for me in front of a council of other people that also needed students to be admitted from their sections, right? I felt so honored and so seen when she had told me that, but it's also, I think, a very terrifying fact that had I known going to admissions, I would have I would have been so scared to write my application. Um >> Yeah. So, to emphasize what you just said, Yeah. >> an internal champion essentially advocating for you to their peers. You need to sell somebody so hard they're willing to put their own reputation on the line advocating on your behalf. So, this is kind of like enterprise sales, which I do a little bit of at freeCodeCamp. Like, but basically, you're trying to find somebody, make a connection with them, and convince them that like no, like this is definitely the right tool for the job. Like, you should adopt my, you know, LM as opposed to that other financial model or whatever, right? Like, and and then you should put your own reputation on the line to go forth and uh you know, this makes a lot of sense, and it really contextualizes the uh job search. Um So, one thing that I want to ask is uh I just I want to also want to recapitulate the fact that you need to have a story. Yes. >> Um it's not just a collection of bullet points. A bullet points do not do it. They do not win the day, Yeah. >> Um but at the same time, it like maybe a narrative that like kind of walks over the different facets of your high school experience and and your aspirations and goals. Uh making appeals to like, "Oh, I love this program so much because this professor, I read their book and XYZ." That's that's kind of like wasting time. Uh wasting space in your application. Uh Is is kind of the vibe that I'm getting from you. That did you're not trying to like kiss up to them and get them to think that oh, this is this will be a very you know, like enthusiastic student. No, they're looking for people that are I guess um not just sycophantic in the application but but rather like confident that they would bring something novel to the university and not just show up and accept the offerings of that university. Absolutely, yeah. I think I would really really avoid the most generic essays that people write. Um for me, I think there's a question that Stanford asks about about curiosity. Like what shapes the world in terms of what you find curious and and how do you develop that skill as a person? Um and I I tried to think really hard, okay, what would what would everyone else write? And I think a lot of people would write, oh, like I was part of like this like computer science club and like I really find out I was interested about like this specific thing within CS and like I like did research with this professor. So many other people are writing essays like that. Like what makes you unique? Um and so actually I think in my entire Stanford application, I like barely talked about my academics. I talked a lot more about just who I was as a human and my personality. And I love that the Stanford application I think focuses in more on that. But the way that I ended up answering that question was about my I have a pet parrot and she got sick my freshman year of high school. And I went on this whole ordeal of having to research and I found out that a lot of doctors that I was going to like they didn't even know what they were talking about when it came to the health of my bird. And so it kind of shaped the world in that I I recognized like the professionals didn't have all the answers, right? And then I kind of had to like do all my own research. And I think I was I was so proud of that essay because it was just so uniquely me. You know what I mean? Like this is a unique experience that who else is going to talk about their sick bird in their in their Stanford application, you know what I mean? So it's really selling yourself, having a narrative, and thinking, okay, what would everyone else write? And it's fine if you have to write what everyone else writes. Like if that's all you have, that's great. But if there's something unique and something that you can like tie it to story to, I just love interesting stories. I think you should absolutely do that. Yeah, and it sounds like you had the confidence to talk about something that people might dismiss as oh, that's such a trivial thing like that like they're going to feel insulted that I'm talking about my my parrot. >> Yeah. In my college or or you know, or but you had the confidence to like no, this is relevant to who I am. And so you were >> Yeah. able to tie it into the story and and that I think illustrates a certain degree of confidence in one's own thinking and reasoning. Um yeah, that's really cool. So, the process of getting into Stanford, I mean you said that it was like a pretty exhausting like that final sprint toward the finish line in high school. Can you talk about like what those final few uh months in high school were like like during this process cuz you said you got really burned out and then it was like a huge reprieve once, you know, uh we're in and and you could like just let that go to an extent and and decompress a bit. Yeah. I think it's honestly a lot of a mental game and that whenever I was given an opportunity, I knew that I had to pour myself fully and completely into it and really try my best to stand out. And I think it was it was that I wanted other people to perceive me as as, you know, this person that works really hard. But I think also internally it was anything that I was given, I wanted to take full and complete like I just wanted to like put all my effort into it, right? Like this is something that was given to me, I should try my hardest with it. And I think that mindset is honestly just incredibly exhausting. I think there were like at least like 10 different things that I was part of in high school and I genuinely tried my hardest to pour myself into everything that I was working on. And also the people that I was working with, right? I think the community that that that I was in in high school was really important to me and making sure that my peers felt supported too was really important. Um It was it's just mentally taxing in my opinion to be in high school and want to be part of want to want to go to a school like this. There's this constant like notion that like any moment that I'm free is a moment that I should spend doing something. This is a thought that I had for four all four years throughout high school. Um my weekends were spent doing robotics or my weekends were spent doing research or doing homework that I caught up on because I was doing other extracurriculars throughout the week. Um and that's like so exhausting. Like I I cannot think of like a single week where I ever took a break off. And it it hit the point my senior of high school where like there was a there was a competition I was at and I literally just like broke down sobbing and I remember my dad was trying to comfort me and being like, "Oh, when you go to Stanford like you will be with other people that have worked just as equally as hard as you to get to where you are. Um and you're going to feel supported and you're going to feel seen." But that was something that I very much struggled with in high school. Um that that mental taxation of like you always could be doing more. There's always someone that's doing more than you. And at least when I came to Stanford that sigh of relief that I'm referring to is I knew that I was going to be okay. Like all this was worth for something, right? I think in high school it's very scary to think about all this effort and time that you're putting into things might not even be worth it. Like you might not even end up at a school that like I had friends that worked really hard in high school and they ended up at community college. And there's nothing wrong with community college. I think it's honestly great and I think they've grown a lot as people, but I know they were like severely disappointed at the fact that like they didn't end up at like at least like a UC, right? And I feel really bad for them. And I think that's incredibly scary and I think that is what I mean about the burnout and that there's this this mindset like you always have to be doing more because there's someone else doing more than you. Um that's so scary and I can confidently say that now I'm at Stanford I have this like sense of comfort that like I'm going to be okay, right? Like I I worked here and I'm at the school and I'm going to be okay. And I worked really hard to get to this point and I'm really great that I I'm really grateful that I have that sense of stability in my life. Um but it's it's really hard in high school to balance it all, to have a work-life balance. And I honestly can say I I feel like I didn't really have a work-life balance. But I wouldn't have changed anything. I feel like I grew a lot as a person and the people that I knew that were also going through this, like in that way we had a sense of community. Um but yeah, it's it it was it was really hard. I was really burnt out my senior of high school and I got into Stanford early and I didn't I didn't apply to any other schools besides the UCs and I feel very lucky that I got in early and I didn't have to write like 20 more college applications over my winter break. Um but yeah, I I was I was very burnt out after the whole process and if I had to if I had to do it all over again, I don't know how I would do it. I honestly think I worked harder in high school than I have at Stanford and it's just because of that that scary mindset to be honest. >> Yeah. Yeah. >> So uh you have to do more because there's always someone doing more than you. That's the mindset that is is grinding you uh and and burning you out essentially. Um >> Yeah. and I want to talk a little bit like you don't know what you're doing that is excessive. Like maybe I don't need to do as much of this. Maybe I can get away with doing less of this and you don't know at the end of the day uh you could you can probably presume that some amount of your effort was squandered, but you don't know which effort. So I mean, you don't really have a way to tease all that. That must be also a frustrating aspect of it. Um just the opacity of the process. Even with Stanford being pretty transparent, I guess historically they used to actually show your application uh and like the comments and stuff, but um I I imagine that could be quite uh tilting for a lot of people that are just trying to get into a good school and you mentioned some of your classmates that were trying really hard to get into uh you know, more selective schools and then end up just having to go to community college, which is a fine outcome if you're not aiming high. If if you just want to go to an inexpensive school, California's community college system is like the best in the world. It's very reasonably priced, excellent teaching. Uh that is not a bad place to end up by any means, but >> Yeah. if you were aiming to get into like UC um you know, LA or or if you were aiming to get into Cal or something like that, then then that could be kind of crushing that you're not able to achieve that despite all of your effort. So, when there is so much incentive to get into these programs, people are going to try to cut corners naturally because it's really hard and you don't even necessarily know if it's worth it because you have a you see all these other people that are not necessarily getting into it despite having it spending all the effort. And that can lead to a lot of academic dishonesty, people cheating, things like that. And you have taught at Stanford in addition to been a student. So, you've been exposed to a lot of academic dishonesty. Uh, and I wanted you to if you can like maybe talk a little bit about that. Like students cheating in high school, students cheating at university, and like just share any thoughts you have on that. Like what is driving that? Like what can be done about that? Like what you would say to somebody who is considering cutting corners, maybe using LLMs to write their papers, uh, maybe um, not necessarily studying but just like pulling up cheat sheets and stuff like that. Yeah. Um, I think for for So, I mean AI the whole AI boom happened to my senior year around spring quarter. Like I remember right before I came to Stanford was when all this was happening. And it was it was it was honestly scary. I I feel so tremendously grateful that I did not have AI in high school. I think it is so tempting to have to use those not to have to use those tools. But to have them available to you, like it's all every if everyone else is using it, then sometimes it feels like, "Oh, it's okay if I do this, too." I feel so lucky that I thugged it out, that I had to learn chemistry from the textbook, that I had to write all these papers and stay up late and and learn how to like actually effectively communicate through papers. I feel very very lucky that I didn't have any of this pressure or any of this access to these tools. Um and I In some ways I I do wish college was still like that. Uh I have a younger brother who's in high school, and he just tells me, I mean, everything in my AP class like translated to paper. Everyone's doing everything on paper. If he has to write an essay for a class, it's you have to sit down, and you have to write it on paper, and you can't you can't use like LLMs or anything like that. And I think that sucks, and I think that it's awful that we have to start putting more rules on students that generally wouldn't cheat because everyone else is cheating. Um I think if you think about the mindset of someone that is trying to get into a big school, like um like the IVs or Stanford, GPA is just so it's like the bare minimum now to get into a big school. Like you have to have a perfect GPA to even be considered for a school like Stanford. And I think GPA inflation is something that a lot of people have been talking about recently, and that it's just it's just so easy to get A+s now. There's I mean, even at my high school, there was such a push to give everyone As and to give everyone high grades so that the graduation rate could be higher, right? So they wouldn't hold people back. Even though very clearly there are some people that should have been held back. Um There There's some people that like would get Fs at my high school. Like they just would genuinely put no effort. They would come over for like a summer program. They would just sit and watch videos. Like literally they don't have to take quizzes or tests on anything. Um and they would get credit for that class. Just by like staying at school for like 2 hours a day like watching videos, which I think is absurd. Um but I I I think that's a different type of person. For the type of person that's like hyper-competitive, I think it's very easy to use these tools just for the Okay, I just like need to get this bare minimum GPA in order to even qualify for some of these schools on top of Okay, the time that I would have spent doing school can be time spent doing extracurriculars or other things that can boost my application. Um That mindset is I think it's Yeah. >> Yeah. So So just to be clear, because there's so much pressure to also do all these extracurriculars, but you have to check the box of having like a perfect GPA. A lot of people are looking around and saying, well, if I can just, you know, farm out the GPA part to LLMs, Yes. >> and do the extracurricular stuff, then I'll have more time for extracurriculars. So, they're they're maybe being squeezed. Like, they they don't feel they have time to do both. Yes. Yes. Absolutely. I think that's the perfect way to put it. Um that mindset is is is quite scary. Uh even at Stanford, I was a I was a TA my my freshman year for the intro to CS classes, and I mean, I saw so much cheating. I think a lot of people always have this mindset of like, "Oh, I'll just like learn it later. Like, I just like I like need to get this done." Um I think particularly at Stanford because of what I mentioned earlier, everyone is trying to do everything right. People are trying to make a startup and do research and also do the classes on top of clubs that they're doing. And it's just it's just too much work for I think one person. And so, this pressure, it's the same thing of, "Oh, my classes are like least important." I think particularly at Stanford, people have this sense of security of like, "Oh, because I'm at this school, like I could just cheat and like I would still get a degree from here. And then like I'll have a job and like I'll still be fine." But I think it's it's honestly so sad that people think that way. Um and whenever I had students that would cheat, I mean, I couldn't directly talk to them, but it was the the the narrative that we would tell these students is "You're paying all this money to go to this school, and what are you getting out of it?" Like, the the AI knows how to do these things, right? The entire point of you being part of school is that you can teach yourself these things, right? I'm not teaching the I'm not teaching the ChatGPT how to do proofs or things like this, right? You are the one that needs to learn how to do proofs. And it's it's really unfortunate, a lot of the I think the test scores at Stanford have have tanked, but GPA inflation is still very high here, and it's it's unfortunate. And I think it's really hard to motivate people that have access to these tools and freely and openly use these tools. Um when there's just so much growth and learning that can be done here. And for me particularly, like I'm paying for my own college, it makes me really appreciate that like I'm paying X amount of money to go to school. I need to get as much of it out of it as possible, and that includes learning from my classes, right? But I think a lot of students here just don't have that insight or that that maturity, to be honest, to recognize that, and it's just always easier to take the easy way out. And it's it's becoming incredibly easy, and it's really hard to catch cheating. I have like I know people that like use tools that humanize certain things that they get out of like ChatGPT for essays that they would write. And I think that's crazy that there are layers upon layers upon layers of AI to replicate a human's writing. Um it's it's just really unfortunate. I think that these people are going to get hired when they have to do like technical interviews for schools. Um but yeah, it's it's really unfortunate, and I think schools are taking bigger measures to deal with it, but I don't think they'll they'll ever fully be able to to handle all the AI tools that people are using. They're just they're just getting too good, in my opinion. Yeah. It's kind of arms race, basically. Uh the AI tools can't tell they can't detect the output of AI tools, no matter how much, you know, companies try to sell these uh you know, school systems anti-cheating or cheating detection software and stuff. Like fundamentally, if an LLM can't tell whether it created an output, then how are how are you going to do that? And I had a a guest a while back who was talking about like there are certain attributes like burstiness of an LLM, and like certain like Oh, and a lot of people like armchair, you know, uh LLM detector people who love to do that that proofing, uh they they will um say, "Oh, if you use a lot of m dashes, you that means that you just And And you know what? I use tons of m dashes throughout my writing. For years and years, all my writing was So I have to like rewire how I write to not use m dashes cuz I don't want people to think that I'm using an LLM. So, it's ruined m dashes for me. It's ruined m dashes for me, too. I Those are were favorite things to use. I remember when I unlocked this in high school, I was like, oh, I'm unstoppable. I know how to use em dashes. And then, of course, ChatGPT still uses em dashes. It's so unfortunate. Anyone that I know uses em dashes, it's it's so unfortunate. It's sad. >> it's the most like uh it's the Flex Tape of writing, basically. You can use it for anything. Um anytime you're not sure what grammatical or like what punctuation to use, em dash it, and you can just append a clause. Um so, where are you going from here is one of the questions that I'm very curious about cuz you're pretty early in your college career. How many more years do you have before you graduate? I'm a sophomore right now, so I still have 2 more years. Maybe we'll get my master's here. We have a 1-year master's program at Stanford. Um but, yeah. It's It's really scary. It's going by quite quickly, but yeah, 2 more years. Yeah, and like what are your current plans? I know you're working at the security company, uh and you've been teaching as Stanford. Again, huge accomplishment to to be a student and also being an instructor. Um but, like like where do you see yourself heading? Or like how are you going to make the most of the next 2 years or so before you look at going to grad school or look at the job market? Yeah, for sure. Um I think there's honestly still a lot of pressure for me to try a bunch of different things here. Uh I think Stanford I I I don't know how I will feel in 2 years, but as of the moment right now, I love the school. And I I love the fact that I can literally learn whatever I want at any time by the best people in the world at this school. And there's so many things that I want to try that I just like haven't tried yet. And it's scary that I feel like I have to cram all these things in 2 years. Um I think a big part of why I work so hard is that I want my future to be stable, and I want to feel like whatever I put my time into at Stanford made me a better person, that I grew more as a person. And I feel like there's just a lot of pressure, at least internally within me, that like I have to just work really hard here to like make use of every opportunity possible. And I think that mindset from high school is like kind of coming back to me. And so I've I've gotten better at work-life balance here. But yeah, there's this pressure that I feel to to do as many things as possible. Um So, yeah, right now well, I just wrapped up TreeHacks, which was fantastic and I think it really taught me a lot about uh When I think about potential career paths, I think a big part of what I was pushed to do as a kid is the dream job as a do SWE at Google. Like that is like stability, you got money, like it's always going to be like a great job, right? Um And so this was something that that like I came into Stanford thinking, "Oh, I want to do SWE at Google. I want to do SWE at big tech." Yeah, and SWE is software engineer. Yes, software engineer. >> like it's just a short sweet way to say it. Yeah, yeah, yeah, um But I think after after doing TreeHacks, it taught me more that like a lot of what I really truly love doing is connecting with people and building community and leadership and just putting on things that make other people happy. And uh maybe my dream job is not just sitting at my desk every day like coding. I think this is what TreeHacks has taught me. And so I think in all the other future opportunities that I'm considering, I do want to build my technical skills, but also just like connecting with people I think is a very big passion of mine. Um But yeah, so so TreeHacks just wrapped up and I'm still thinking a lot about what I want to do in terms of a career just because I feel like I don't have that many years left. Which is scary. But yeah, right now I'm working at a a security startup in SF and I'm also working at a uh security company in the summer. It's called Armory. They actually just went public. Uh but they're working on AI agents that do penetration testing, which is basically hacking into systems. Um I think this space is super cool and it's kind of like the first thing that I tried here at Stanford. Um I knew that like coming into here like I wanted to try research in robotics and and security and and even some bio stuff. Um and so I looked down the list of things that I wanted to try and I said, "Okay, I'll try security first." I ended up joining both the the cybersecurity teams here at Stanford and I've I've absolutely loved it. And then I was like, "Okay, you know what? Like this field is stable. This is something that I think will always be big in the future of AI-generated code. It's always insecure, right? So, there's always going to be spot here. And I think security is super fun because it's like very gamified and that like you're given like kind of like a puzzle, right? And then you have to like get your way into it. And I feel very lucky in that security I feel like was the first thing that I tried here and I genuinely just adored it and I loved it and I'm going to try a bunch more things here next year, but this might just be the thing that I end up going into and I I've I've I've loved all the startups that I've looked at so far. Um and so yeah, I I think for me right now it's it's taking hard classes, but also I want to venture out more into Silicon Valley. Um maybe I would consider starting something while either in school or after I've graduated. I think a lot of the best founders make good companies in their late 20s and so I I don't know if I would feel like experienced enough, but honestly I don't know if you ever feel experienced enough to make your own startup, but yeah, I think for me right now it's it's just I really enjoy learning more about the business aspect of of directions to startups and um I don't know. I'm I'm still considering a bunch of different careers, but it's just still honestly trying a bunch of different things to see what I really like until I have to venture out into the big world and and make a decision. Yeah, well that that observation that we'll probably always need security engineers essentially. Uh there there's always going to be some frontier that's being explored and potentially exploited by attackers and things like that. Um sounds like a good place to focus. Uh I I want to talk a little bit about um AI and how it's impacting the security field if you still have a few minutes. Yeah. Like I can um obvious like there was this curl maintainer. I don't know if you're familiar with this. He gave a talk at like I think it was like PyCon or something, but he was talking about how the volume of spurious security disclosure like people basically responsibly disclosing like, "Hey, there's this vulnerability Uh and opening, you know, GitHub issues and things like that that it was taking like 6 or 7 hours of his week. Every week was just like people using LLMs to analyze the curl code base and find usually hallucinated security issues and that he had to take all these very seriously and it was just burning him out cuz it's like the LLMs apparently are not that great at finding vulnerabilities, at least they weren't a few months ago when he gave this talk. But what are some of the ways that security is being impacted by AI systems? I mean, so the company I'm working for right now, basically what their job is is they look at PRs, which are like pull requests from GitHub. So whenever like So basically I was with the way that most software engineers work, like most companies work, is they have something called GitHub, right? And they'll have these things called repos and think of them as just like code bases that a bunch of different people can collaborate and work on. And so a pull request is basically you want to make an edit to something in the repository. And so you'll write code and then you'll push it to the repository. So these pull requests are basically changes in code. And the the company that I'm working at right now, basically their entire thing is that they have they look at the pull requests and they see the code that often times Claude or like Code X is writing and they will say, "You wrote specific things that are definitely definitely not safe like in any way, right?" A lot of LLM generated code does this. Like a lot of a lot of Claude code is is unsafe. And I think it's getting better. >> That would make sense though because it's trained off of the open web's, you know, code, like all the open source repos on GitHub, many of which are not secure, all right? Many of which were written by people who didn't necessarily have like a really firm grasp on security or maybe it's older code that hasn't been updated as new security best practices have come online. So it totally makes sense that LLMs should be generating insecure code left and right. Yeah. Yeah. And so, that's what the the company I'm dealing with right now does. And they also they inject specific prompts into LLMs to into the cloud to make sure that like, "Hey, this codebase is built for this. It probably will help this feature. Let's make sure that this feature is particularly safe." Um it's it's really unfortunate that at least at Stanford, there's no push to learn security stuff here. Security is a very tiny space within the undergrad at least population at Stanford. The people on my security team have asked Stanford publicly, like, "Could you Could you at least make a security track?" Like, we have different tracks that we can um major in at Stanford within the CS track or within the CS major. Um and there's never been ever a security track for undergrads to study. There's a grad There's a grad track, but um a big part of of what people have been pushing for at least within my security team is like, "Stanford is outputting some of the best software engineers, some of the best engineers in Silicon Valley. These people will be doing grand things in their life. They need to know at least how to write secure code. And a lot of my friends are doing their first uh software engineering internships. And no one is writing code manually anymore. Everyone is literally just using Claude upon Claude upon Claude, which is it's great in terms of fast output, but a lot of people I think don't really know the code that they're writing. And so, if you don't even have this like push for people to learn security, these big people that are going to be writing code that I guess they they don't even fully understand and one of them leading big companies, their codebases are going to be so insecure. And I I feel like it's unfortunate that like Stanford doesn't I guess acknowledge this more publicly, but this is something that I think more like I think this needs to be more fundamental within the CS core of any major at any school. Like, I think more people need to be thinking about security um in the context of especially because uh just AI is writing everything these days. And people actually genuinely need to understand the code that is being written. Um So, yeah. Yeah. Security's a huge issue and I think it's honestly just getting bigger and bigger. And I think big big companies like Anthropic are are working on this right now, but it's there's just so much AI-generated code that is being written right now and I don't know if it can be caught up in time to catch all these bugs, to be honest. >> Yeah. And the rate at which code is being created now is astounding and >> fast. So, we're going to have to go back through all the code that's been being generated today once we have the advanced stuff and we're going to have to essentially have like the band-aid solution that goes through and finds the stuff. And it sounds like your your uh company, the product that they're building is um already doing that to an extent. Like it's trying to catch it at the PR level, uh but you know, a lot of stuff will be closed source until it kind of like gets opened up uh or it'll just remain closed source and people will figure out ways of identifying these things without even looking at the code base, just like poking around in the system and they're going to find these vulnerabilities. And people are going to get pwned. Yeah. It honestly feels like a band-aid on top of this really really big issue. I think if engineers are more pushed to learn basic security, at least like in their undergrad classes at um at whatever school they end up working at, right? Or if companies even push for their engineers to take security courses, this could be quite good. You don't even have to know the crazy things as long as you know the basics, um I think this could really help in terms of of people writing software that's that's really important to like the foundations of a lot of the industry, right? Um but there's I just I just don't see that push right now and I think that's something that should happen. Free Code Camp is definitely emphasizing security a lot. Uh I mean we we definitely want people to understand and appreciate like the very bare minimum, like the OWASP type stuff, uh but but also just have that mindset. Like And uh I I mean hackathons are great, but like are there hackathon like red team blue team type hackathons as well uh at Stanford? Like you all have other events like that that people can participate in? Yeah, yeah. We don't This is something that we're actually working on right now. I don't know if you've ever heard of a capture the flag before. Yeah. A CTF. Yeah, yeah. So, CTFs I think are becoming increasingly more popular. And this is actually something that I that I This is like a tiny bit of a tangent. I think if people are interested in interested in CS, I think it's very hard to get a CS job right now in the market. I think if you go to a big school, you're going to be fine. But I think if you go to like a smaller school, like community college, it's really hard in my opinion to get like a software engineering degree just with all the all the changes that are happening within the AI field. I think a security is something that like you don't have to go to a big school to to do. I think a lot of it is like practical knowledge. And so, something that I did last summer was get like a security certification. If you feel like you're in the space where like you're really worried about job stability, I think security is something that is very approachable from from any lens, right? You don't It's not something like research or you have to go to like a big school for that. A lot of it is just honestly practical knowledge. But anyways, yes, capture the flags are something that have become really popular. And basically what a capture the flag is is you you're given little puzzles and challenges that you have to basically like hack into systems or either do like crypto things or you have to um There's like a There's a bunch of different things that you do with capture the flags, but basically you're trying to capture some sort of flag. So, some sort of flag is hidden in some sort of system and you either have to do something security related to get that flag out. And so, this is something that I recommend to people in their first learning security is is to do capture the flags. Um There are I I participate in red team blue team competitions in college. This is something that I think most other schools have, not just Stanford. And if there isn't one, people should start one. But I think it's really fun. The pen testing competition to the red teaming competition that I'm part of is it's really fun. We just hack into systems and then people will try to defend their systems and you get rankings and you get points for it and you end up going to like big competitions. You get to travel. It's really fun. Yeah. And I I love security for the reason that it just feels so gamified, you know? Like it's it's fun that you get to hack into this thing and uh the competitions that I that I do, they're like legit teams of red teamers that are trying to get into your system. It's It's so It feels cool. Like they're actual professionals shaping this event and they you get to learn so much about what the actual industry is like in terms of penetration testing and and defense. >> I imagine the the feedback loop is a lot tighter than like trying to bring a product to market and then you see who actually care and stuff. Like you're you're actually directly trying to break into a system and you're either breaking into that or you're not, right? So So you're like getting like That That's why I think uh you're you're using this term gamified. Like it feels like kind of like you're playing a game. Right? Um It actually definitely does. Yes. Yeah. Uh so I have one last question for you. You mentioned like, "Hey, if people uh want to get like a you know, red team, blue team competition or some sort of capture the flag competition or even just a hackathon going on at their school, at their company, if they're like, "Hey, we need to raise awareness of security uh concepts." or "Hey, we need to raise awareness." Like something I'm a big advocate of is getting people to actually use LM tools and not just write them off because I you know, used them 2 and 1/2 years ago and they weren't very good and I used them a year ago and they still weren't very good, but if you use them now, they're pretty good. >> Yes, absolutely. >> Yeah, and they're getting better and better and I feel like so many people haven't given them a chance lately and they're doing themselves a disservice because they could be getting a lot more done. Uh shout out to Magesh Mohapatra on the free code game team who recently wrote a book that's free on AI assistant assisted development. Uh I'll put a link to that in the description, but like let's say hypothetically somebody's trying to just get raise awareness at their company or at their school, trying to get other people to take serious security seriously, trying to get people to take like LM code gen tools seriously, things like that or or whatever it is that they're interested in, they want to organize some such event. Having just organized, along with some other awesome people on your team who I got to talk to, Treehacks, like what advice would you give to somebody if they had to start from scratch and like try to get a hackathon going at their institution? Yeah, absolutely. I feel very lucky that Treehacks is like this massive event and the infrastructure and the foundations for the event were built on before I even came to Stanford, right? So, I I feel like I inherited this thing and I got to make it slightly better the year after. But if it is scary, I think to start off with something new. I think a a big part of the tips that I've been telling other hackathon organizers is there's a few foundations to a hackathon, right? You want to make sure that you have a few prizes, you have a few tracks that people can compete in, and you really just want to give people all the resources and support to make whatever that they want to build possible. I think it's a big part of Treehacks and our mission is that we fly you out here and we give you like unlimited snacks and food and resources and sponsors and connections and community and you can literally build whatever you want within those 36 hours that you can that you can code, right? I think that is the most pure vision of any hackathon and I think that is the core the core mission that people should stick to. And so, if you're fundraising for the first time, I mean just reaching out to local companies is always really important and I think a one project I think there's a lot of different guides on organizing hackathons that that I would recommend looking up. I think MLH is is Major League Hacking, they're a big hackathon organizing support. I don't know if they're nonprofit or not, but they're they're a great company to talk about. But one thing in particular for me that I've learned a lot while organizing events like this is it's the like human part of organizing that is the best part of it. And and what I mean by that is yes, I did all these great things like we interviewed Sam Altman at Treehacks and and we had all these really big sponsors come and we had robot fighting and llamas and and all these great things and we flew out all these people, but my favorite part of organizing any event is always just interacting with people. Like talking with the hackers I think is always always my favorite part of the event. And um before TreeHacks had any of this big budget, I mean we also started off I feel like pretty small and uh for the fun events at TreeHacks, we have pretty grand things now, but before we used to have no budget. I remember uh before we had llamas the year prior we had literally no budget for any of the fun things. And what we ended up doing is we would rally up all the dogs from all the like grad students around here and we'd bring them to to TreeHacks and that was like doggie hour, right? That didn't require any money, right? Um and that was still something that a lot of people got joy out of. A tradition at TreeHacks is to do a light saber battle, so we have big steps um down into the building and what we'll do is we'll buy like the most cheap light sabers. Like they break basically on impact, but they're like a hundred dollars and you get so many of them and people don't care. They don't care. They just like fighting with light sabers, right? And so I think whenever people are trying to build really grand scale events like this, it's the tiny things like that that I think matter a lot. And you don't need a big budget in order to make these things happen. Uh for a long time TreeHacks operated on making these really fun events happen without really any grand scale budget or anything like that. And so I think just interacting with hackers from like an organizer perspective is tremendously important. I remember this year like we spent a lot of money on food to feed all our hackers and staff. Um there was uh I think us directors ordered pizza right before the our keynote with Sam Altman and we had leftover cold Domino's pizza. And I remember I walked around that night as hackers first started funneling into the building and I was just handing out pizza and their reactions were like, "Oh my gosh, Domino's pizza. This is exactly what I wanted." That cost us like almost nothing to buy this pizza, but just interacting with hackers and giving them out this cold pizza like literally brought them so much joy. And this is what I mean, you do not need anything big in order to build community at these hackathons. I think community is absolutely the biggest part. Um, you just need to pour your time and your effort and your passion, and you really just want to build connections. And you don't need anything grand scale to make that happen. Um, so that that's my tip for for organizers. And in terms of um, kind of raising awareness about security, uh, one major part I I think people talk about it, but no one really truly understands how bad it is unless you actually experience it. Um, there's I mean, being at Stanford, I am very much exposed to all the AI stuff that's been happening with using AI agents and using Claude. This all just comes normally to me because this is the ecosystem that I'm going to school in. But whenever I go back home, no one knows what Claude is. No one knows about any AI generated uh, code tools. And so what I will do is I will just pull up Claude and they'll be like I'll tell Claude like make this website for me. And I I will see their reactions be like, "This exists. This is crazy." Um, I think it's just really cool to just I think people are really intimidated by these tools and that's very valid. I think I was also very intimidated to begin with, to be honest. And now I feel very very comfortable with them. Um, but just showing people the grand scale of the things that these tools can help you build and improving and and helping your life be more efficient is it's it's really awesome. I I had a friend at at um, at another university and he his lab like never used any AI tools. And I just told him about Claude and Cursor and they used it for the first time and they bought I think Claude Pro for like every single person within that lab. And it's just like it totally changed their efficiency. Um, so yeah, I would I would just recommend just just showing people just the awesome things that these tools can help you build. And now people don't have to be like bogged up with all the the the basic code writing. I think people should still learn the fundamentals of programming, but 5 coding exists now. Basically, you're you can make anything like any idea that you have, come to life because of these tools. And that is that is so awesome. And I love that we're in that that stage of CS now. Yeah. >> Yeah. Yeah, absolutely. And I just want to like kind of coast on what you just said, like I I strongly encourage people to learn the fundamentals. Recurse Camp will teach you the fundamentals. There are great books. Uh if you get a chance to go to Stanford, uh hit up on a raffle's C++ classes. But these tools are so incredibly powerful and they can save you so much time and energy. Like with hackathons, it's incredible the projects that come out of hackathons now versus a few years ago where Yeah. the level of polish, the the number of the the scale of the ambition that you can achieve when you can just have some agents write the code for you and you can focus on the higher level architecture and stuff like that. And you know how to fix the agent code. You know how to kind of keep it on the like from going off into the weeds and doing dumb things. Uh you know how to like figure out a way to like make it relatively secure, which is not really that big of a deal with a hackathon cuz most of these projects frankly are not going to be sustained after Like I guess that's a a final quick question. I know I said final question. Yeah. How many of the projects from uh TreeHacks do you think are still you know, operating? Like were there any that you were like, "Wow, that was really impressive. That's going to like like the team's going to continue to work on it?" Oh, absolutely. I think one special thing about TreeHacks is well, just because we are in Silicon Valley, a lot of There's just a lot of startup influence here, right? I think a lot of When we when we are thinking about TreeHacks and and developing it just a few months ago, a big question for us is do we want more of the startup space to have Not control over TreeHacks. Not I guess the word control and infiltrate sound very negative, but do we want to have more influence from from these spaces? Do we want to allow venture capitalists to have I don't know, to talk more with with TreeHacks people? Um I think for us this is important because I think a lot of people want to build companies out of some projects that they've built from hackathons, but I think the the core part of TreeHacks is we just want people to build really cool projects and the engineering innovation is is so important. And if you want to pursue a company afterwards, totally cool. We will give you the resources to do that, but we just want people to genuinely build cool projects and innovate cool things. Um There there's uh there there are some people that I met at the hackathon that are actually trying to fundraise right now for projects that they were working on. And it it's really awesome. We have we have a few sponsors that that can definitely help out with that. Um I mean, we even had like Y Combinator office hours was one of the prizes that you could win. Um so, I think there there at least within TreeHacks, I I haven't gone to many other hackathons, there's a big push for whatever you end up building potentially becoming a startup idea. Um but yeah, I know some people that have that have started already fundraising for projects that I mean, TreeHacks was it was a literally a month ago and people made really awesome projects and now they're yeah, they're trying to build something real out of it and it's awesome. That's awesome. Well, it sounds like a huge win. Everybody check out my documentary on TreeHacks, which will have come out by the time this goes live. Uh I'll link it in the description. Uh Rachel, thank you so much for giving us so much of your time. I know you're very busy teaching and working in security and of course it's still in in classes, trying to finish school. Uh it's very inspiring to talk to somebody like you who uh just has your level of ambition, but is also just like super chill. Um and uh yeah, like you're very easy to talk to and uh I feel like you're you're like super down to earth and uh yeah, like thanks for all the guidance you provided us uh for, you know, ourselves and potentially for our kids as they navigate, you know, a pretty uh competitive future. Things are not easy out there, they're not going to get any easier, right? Yeah. Well, thanks so much for seeing me. I like really genuinely enjoyed this. It was It was great chatting and I'm I'm so happy that I was able to do this. I Yeah, anytime, anytime. Thank you. >> Awesome. Thanks again, everybody. Well, until next week, happy coding.

Generated algorithmically for Search Engine Indexing.

Summarize Another Video