---
title: Carter LaSalle — Security Researcher & Engineer
description: Published security researcher, Lila Sciences engineering intern, and Notre Dame computer science student building secure systems and open-source tools.
canonical: https://carterlasalle.com
---

# Carter LaSalle

Published security researcher, Lila Sciences engineering intern, and Notre Dame computer science student building secure systems and open-source tools.

## About

Carter LaSalle is a computer science student at the University of Notre Dame and a published security researcher. His work spans vulnerability disclosure, network security, developer tools, applied AI, and systems that meet the physical world.

## Selected work

- [Mac Messages MCP](https://github.com/carterlasalle/mac_messages_mcp): A secure MCP server that gives AI assistants controlled access to the macOS Messages database—search, analyze, and send with intelligent iMessage and SMS/RCS fallback. (44K+ package downloads)
- [Prometheus / FireDrop](https://github.com/carterlasalle): Computer vision and drone integration for continuous wildfire detection, tracking, and faster situational awareness. (Phoenix Fire Labs · Co-Founder)
- [treecat](https://github.com/carterlasalle/treecat): A Go CLI and interactive TUI that turns codebases into syntax-highlighted context for LLMs, documentation, and code review. (Homebrew + native packages · automated releases)
- [NetSift](https://github.com/carterlasalle/NetSift): A dependency-free packet-capture explorer that defensively decodes PCAP and PCAPNG files into terminal answers and deterministic structured output. (Dependency-free runtime · cross-platform CI)
- [PixelChangeCheck](https://github.com/carterlasalle/PixelChangeCheck): A Rust screen-sharing system that transmits changed regions through direct QUIC, relay-backed NAT traversal, native viewers, and zero-install browser viewing. (Direct QUIC + relay NAT traversal)
- [EmojiStega](https://emojisteg.is-a.dev): A steganography tool that hides encrypted payloads inside emoji variation selectors, exploring a covert channel in Unicode. (Encrypted Unicode covert channel)
- [Stamina Timer](https://staminatimer.com): An AI-assisted men's health training platform built around structured exercises, progression, and confidence. (staminatimer.com · production)
- [Claude Code Countdown](https://www.claudecodecountdown.com): Tracks Claude Code rate-limit resets and sends timely SMS reminders before access returns. (Live service · Twilio notifications)
- [OneCard Scan](https://onecard-capstone.vercel.app): Digitizes student IDs for Apple Wallet and Google Pay using Gemini Vision and mobile pass tooling. (Senior capstone · deployed prototype)

## Security research

- [Splashin security assessment](https://carterlasalle.com/blog/splashin-security-assessment): Responsible-disclosure research covering two published access-control vulnerabilities.

## More

- [Technical writing](https://carterlasalle.com/blog)
- [Full machine-readable profile](https://carterlasalle.com/llms-full.txt)
- [GitHub](https://github.com/carterlasalle)
- [LinkedIn](https://linkedin.com/in/carter-lasalle)

## Contact

- Email: carterlasalle@gmail.com
- Contact form: https://carterlasalle.com/#contact