Eric Wustrow is an associate professor and seasoned software engineer in Boulder, Colorado with 14 years of experience building secure, high-performance networked systems. He brings deep practical expertise in back-end and security engineering, evidenced by contributions to widely used open-source projects like Certbot (enhancing cryptographic handling and SNI verification) and ZMap (robust UDP probing and payload handling for Internet-scale scanning). Comfortable bridging research and production code, he focuses on hardening crypto implementations and improving reliability in network tooling. Colleagues rely on him for thoughtful refactors that remove vulnerabilities while adding practical mitigations such as hashcash to resist abuse.
ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
Role in this project:
Back-end Developer
Contributions:55 commits in 3 months
Contributions summary:Eric contributed significantly to the `zmap` repository by implementing and refactoring the UDP probe module. They added features to specify different UDP probe configurations, including text, file, and hex-based payloads. Further improvements included adding length checks, integrating logging, and utilizing the close callback for cleanup, enhancing the module's robustness and efficiency. The user also addressed code related issues, which improved the overall quality of the project.
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
Role in this project:
Back-end Developer & Security Engineer
Contributions:24 commits in 19 days
Contributions summary:Eric primarily focused on enhancing the security and functionality of the "chocolate" components within the Certbot repository. Their work involved refactoring existing code to utilize M2Crypto for cryptographic operations, replacing potentially vulnerable implementations. They also added functionalities such as hashcash to mitigate certain attack vectors. The user also touched upon the implementation of SNI (Server Name Indication) challenge verification.
acme-protocolcertbotacmeacme-clientcertificate
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.