My name is Pratik and I work as a Principal Security Consultant at Kroll. This site contains a bunch of my long-form writing and rants on Application Security and other topics. Thank you for reading!
Selected writing
Training a 22MB Application Security Interview model
A short walkthrough of distilling a cross-encoder model for a mock interview website
How Models Talk: Tensors and Tokenizers
A short discussion and interactive lab going through how models see and process input
The Information Security Industry - Education
A long rant about the state of our industry - focusing on education.
TorchServe - CVEs (CVE-2024-35199, CVE-2024-35198)
All writing
Year End Thoughts on AI Agents
A list of opinions after a year of testing agentic AI applications
Adversarial Interviews
TorchServe Workers Code Execution
A dive into how TorchServe workers work and some potential paths for code execution in their context.
ML AppSec Primer
AppSec and LLMs
A dive into how to approach AppSec when using LLMs (Written in 2024)
Securing AWS Lake Formation