Maddie Stone (she/her)
Maddie (she/her) works at the lower levels of computers, amongst the bytes and the circuitry, to try to prevent bad actors from using technology to exploit people. She’s done this through reverse engineering: hardware, software, and everything in between.
Maddie currently works for Google Project Zero as a Security Researcher where she works to make zero-days (the previously unknown vulnerabilities/exploits) hard. To do this, she looks for the same 0-day vulnerabilities in commonly used software and devices as the malicious actors, but instead of exploiting those vulnerabilities, she reports them to the vendor to get them fixed.
Prior to joining Project Zero, Maddie led a team of reverse engineers within Google’s Android Security team who hunted malware in the Android ecosystem.
1. What do cybersecurity and crypto mean to you?
Crypto means cryptography. Cryptography has never been my strength in the security space. I took a Modern Cryptography class as an undergrad, because I thought it sounded cool, but it turned out to be all mathematical proofs and a graduate-level course. Thankfully, I had a professor who helped me get through it, and we both realized that I love the applied work much more than the theoretical.
Reverse engineering has been my beloved niche in the cybersecurity field. To me, it’s meant getting to help people by solving puzzles all day. I work to put the pieces together of how a piece of software or a device, like a phone, works and then determine if it could harm users. The feeling of uncovering the answers and helping people is pretty great.
While my job could also be described as “hacker”, I don’t wear black hoodies, and there’s plenty of space in this field for anyone who likes to creatively solve puzzles and help people, regardless of whether you wear a black hoodie or not.
2. If you could wave a magic wand and solve one problem in tech, what would it be?
If I could immediately solve one problem in tech, it would be that everyone could have private and secure access to the Internet, regardless of how much they pay for their device or access. Today, the less expensive devices and tiers of access are subsidized by selling the user’s data, installing malware, carrying out fewer security reviews, etc. But if everyone could be secure and still have access to information, I think it would do a lot for global equity and equality.
3. What is a piece of advice that you have found especially useful?
“The most damaging phrase in the language is: it’s always been done that way.” — Grace Hopper
This constantly reminds me to question, “Why is it done like this?” Is it just habit, which we need to re-evaluate and propose alternatives, or is there a legitimate reason this is the best way to get the thing done?
4. What’s a challenge you’ve faced, and how did you deal with it?
Working in a field where you see almost no one else who looks like you can be hard for a myriad of reasons. One of the ways it manifests for me is a different version of “imposter syndrome”: I don’t necessarily question if I belong or have earned my spot, but other people do.
While I know belong here just as much as anyone else, hearing the doubt and feeling the need to prove myself to others can take its toll. While I can still fall into self-doubt, I’ve found that calling out the double standards, talking about it publicly, and telling trusted friends and co-workers that I could use some external validation helps me move past the negative comments. I’m able to recognize they’re not a reflection of my worthiness to be in this field.
5. What is your favorite source of inspiration?
It’s hard to admit, but I am often inspired (and sometimes tear up) from the inspirational, cheesy quotes on Instagram. How can you not want to go out into the world and kick butt after seeing just the right words in white block font on a solid-colored background?
6. What is your favorite book or movie?
I never get tired of watching Legally Blonde. The whole time she stays authentically herself…and it cracks me up the whole time.