Samy Amkar
Co-Founder at Openpath Security Inc.
Los Angeles, California, United States
Summary
🤩
RockstarSamy Amkar is a seasoned security-focused technologist and repeat founder with 15 years of experience building startups and offensive security tooling from Los Angeles. As Co-Founder of Openpath Security (acquired by Motorola Solutions) and earlier Fonality, he blends product leadership with deep, hands-on engineering. His open-source work on high-profile security projects like poisontap, usbdriveby and evercookie demonstrates uncommon expertise in USB/HID exploitation, browser persistence techniques, and practical privacy/compatibility hardening. Samy pairs full-stack development instincts with pragmatic threat modeling, often addressing cross-platform quirks to make exploits or defenses reliably operational. He also advises robotics and consumer-focused teams, bringing an operator’s mindset to product security and acquisition-stage outcomes.
15 years of coding experience
8 years of employment as a software developer
Stackoverflow
3reputation
0reached
0answers
0questions
Github Skills (16)
security10
html10
php10
exploit10
javascript10
cookie10
perl10
arduino10
web-cache9
object-cache9
disk-cache9
memory-cache9
network-security9
silverlight9
windows9
Programming languages (22)
Github contributions (5)
samyk/evercookie
Sep 2010 - Nov 2017
Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:61 commits, 11 PRs, 19 pushes in 7 years 2 months
Contributions summary:Samy contributed to the evercookie project by adding features and making code changes to enhance its functionality. They implemented silverlight, window.name and standard cache support. Additionally, the user addressed issues with etag handling, cache mechanisms, and dependencies within the Javascript code, improving the project's overall reliability. The changes involved modifications to both the client-side JavaScript and the server-side PHP files, reflecting a full-stack approach.
techniquesdata-privacybrowsersilverlightgoal
samyk/poisontap
Nov 2016 - Nov 2018
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Role in this project:Security Engineer
Security EngineerContributions:25 commits, 12 PRs, 23 pushes in 2 years
Contributions summary:Samy appears to be focused on the security aspects of the `poisontap` project. They made modifications to the injected Javascript files, likely to prevent the code from pointing to the developer's server, and ensuring the injected scripts executed correctly in different browsers. They also modified the USB configuration to potentially increase compatibility across different operating systems. The commits demonstrate a concern for the project's operational functionality and user privacy.
pi-zeroprotecteddropspassword-protectedusb
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.