Michele Spagnuolo is a Staff Information Security Engineer at Google Zürich with 11 years of experience building large-scale web security infrastructure and tooling. He leads efforts to make petabytes of daily web traffic query-able, enabling organization-wide remediations and supporting deployment of modern web security features while supplying leadership with actionable security metrics. Earlier work includes co-designing parts of the W3C Content Security Policy, driving CSP adoption at Google, and developing tools such as Rosetta Flash and BitIodine that reflect a pragmatic blend of research and engineering. Michele combines deep protocol and standards experience with hands-on skills in fuzzing, large-scale monitoring, and cross-organizational coordination with browser vendors and standards bodies. He holds advanced engineering degrees with top honors and a perfect MS GPA, signaling both technical depth and academic rigor.
12 years of coding experience
9 years of employment as a software developer
BEng, Engineering of Computing Systems, BEng, Engineering of Computing Systems at Politecnico di Milano
VIII Cycle, ASP diploma, Merit, VIII Cycle, ASP diploma, Merit at Alta Scuola Politecnica
Master of Science (M.S.), Computer Science, 4.0, Master of Science (M.S.), Computer Science, 4.0 at University of Illinois at Chicago
A tool for manipulating SWF files, leveraging zlib to craft alphanumeric-only valid SWF files in order to allow CSRF with SOP bypass thanks to JSONP abuse.
Contributions:11 commits, 1 PR, 5 pushes in 5 years
csrfjsonpzlibsame-origin-policyswf
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.