Stanford's youngest instructor on InfoSec, AI, catching cheaters - Rachel Fernandez [Podcast #217]
TL;DR
Rachel Fernandez, Stanford's youngest instructor at 19, discusses why C++ remains vital to modern infrastructure despite security challenges, the risks of AI-generated code built on potentially vulnerable foundations, and her journey from a resource-starved high school to organizing one of the world's largest hackathons with million-dollar budgets.
π» π» C++ Systems Foundations 3 insights
C++ powers critical modern infrastructure
Despite Python and Go's popularity for startups, C++ remains the foundation for operating systems, game engines, and emerging robotics systems requiring low-level hardware control.
Memory safety improvements are actively underway
Bjarne Stroustrup visited Stanford to discuss ongoing standardization efforts for type, resource, and memory safety through new profilers, modules, and static analysis tools.
Full memory access remains a double-edged sword
While C++ grants developers dangerous levels of control that create security vulnerabilities, this flexibility is precisely why it remains essential for systems programming and high-performance applications.
π π Educational Disparity and Opportunity 3 insights
From $100 cookie sales to million-dollar budgets
Rachel contrasted her high school robotics team's struggle to fundraise outside grocery stores with Stanford's Tree Hacks, where sponsors readily funded even whimsical ideas like bringing llamas to the event.
First in years to break through to Stanford
As the first student from her Westminster high schoolβwhere 70% of students qualified for free lunchβto attend Stanford in years, she witnessed how educational resources determine opportunity.
Immigrant community shaped educational values
Growing up in a predominantly Mexican and Vietnamese immigrant community in poverty transformed her view of education as the primary vehicle for economic mobility.
π€ π€ AI and Security Realities 3 insights
AI code inherits foundational vulnerabilities
While working at a security startup analyzing LLM-generated code, Rachel emphasizes that Python and JavaScript applications rely on C++ foundations that contain decades-old memory leaks and bugs.
Surface-level security misses the root problem
Current security audits focus on high-level AI-generated code rather than the low-level systems underneath, creating a false sense of safety while foundational C++ vulnerabilities persist.
Developer deskilling creates security gaps
The trend of developers outputting code they genuinely don't understand through AI assistants increases risks, making systems-level knowledge more critical than ever for building responsible infrastructure.
π π Tree Hacks and Scaled Impact 3 insights
Massive scale enables creative logistics
As logistics director for Tree Hacks' 12th year, Rachel managed a thousand participants selected from 15,000 applicants with million-dollar prize pools and celebrity interviews including Sam Altman.
Budget freedom unlocks ambitious visions
The hackathon's substantial funding allowed instant execution of ambitious ideas like importing llamas from Central California, demonstrating how resource availability accelerates innovation.
Tiny logistical details create memorable experiences
Planning her first event at this scale revealed countless invisible details behind large productions, where attention to small comforts significantly impacts participant happiness.
Bottom Line
Master low-level systems fundamentals like C++ to understand the security foundations that AI-generated code relies upon, rather than blindly trusting high-level abstractions.
More from freeCodeCamp.org
View all
Build a Self-Healing CI/CD Pipeline with AI
This tutorial demonstrates how to build a self-healing CI/CD pipeline that leverages N8N and OpenAI to automatically detect build failures, analyze error logs, generate code fixes, and open pull requests without manual intervention.
Web Scraping for Beginners β Extract Data with an API
Anna Kubo demonstrates how to bypass common web scraping obstacles like CAPTCHAs and bot detection by using the SER API to extract structured data from Google Search, YouTube Shorts, and Google Lens with minimal code.
Docker Full Course 2026
This comprehensive Docker course establishes containerization as essential infrastructure knowledge for modern IT roles, teaching practical deployment skills from basic images to multi-container orchestration using hands-on AWS cloud labs.
Build Your Own AI Agent β Full Course with OpenAI, Langchain, Render Deployment
Anna Kuber demonstrates how to build a production-ready AI agent using Node.js and OpenAI that automatically researches new Slack community members, calculates business fit scores using GPT-4, and stores results in PostgreSQL on Render.