Dan [the] Salmon

Hi, I’m Dan. I’m interested in Information Security, Data Privacy, and Programming.

Projects

• S3scanner - Scan for open S3 buckets and dump contents
• miniprint - A medium interaction printer honeypot 🍯
• venmo-data - A dataset of 7 million transactions scraped from the Venmo public API
• watchtower - PoC to detect and alert when Rogue AP and Deauth attacks occur

Vulnerabilities

• CVE-2025-27422 - Authentication Bypass via User Creation (FACTION)

Press

• You Should Really, Really Make All Your Venmo Transactions Private
  Madison Malone Kircher, New York Magazine, 2019
• Millions of Venmo transactions scraped in warning over privacy settings
  Zack Whittaker, TechCrunch, 2019
• Venmo Opens Your Transaction History To Anyone Who Wants To Look. Here’s How To Fix It
  Kevin Murnane, Forbes, 2019
• Millions of Transactions Scraped in Latest Demonstration of Venmo’s Absurd Privacy Policy
  Dell Cameron, Gizmodo, 2019

Writing

• I Scraped Millions of Venmo Payments. Your Data Is at Risk
  Wired, 2019

Presentations

• Colloquium on Information Assurance, Cybersecurity, and Management (CIACOM) 2019, miniprint - a printer honeypot

Teaching

• COMP2145 Web Programming (South Central College, Fall 2019)
• COMP2300 Java (South Central College, Fall 2019)