I am the senior privacy researcher at Brave Software,
where I work on new ways to improve privacy and security on the web,
and to measure the risk of new threats to Brave browser users.
Before joining Brave, I worked on my PhD in the Computer Science department
at the University of Illinois at Chicago in the BITS Lab,
working under the kind and knowledgable guidance of Chris Kanich.
I research web security and privacy, including browser hardening techniques and
measuring how the growth of the Web API has impacted user privacy and security.
I use this research to build access control systems for browser functionally
and tools for deploying web applications that provide stronger
privacy and security guarantees for users.
-
Instructor for Software Design – UIC CS342
2017
-
TA for Computer Networks – UIC CS450
2017,
2015
-
Best-of-Breed
Content Blocking in Brave: Three Projects to Improve the Depth, Breath, and Usefulness of Blocking
at Scale
invited talk
MADWeb
2020
-
Brave, Fingerprinting,
and Privacy on the Web
invited talk
CS253 - Web Security course at Stanford
2019
-
Privacy,
Standards and Anti-Patterns
invited talk
PEARG
at abbr title="Internet Engineering Task Force">IETF
2019
-
Brave,
Privacy and
Standards
invited talk
WWW, W3C Track
2019
-
Web
Privacy Beyond Extensions: New Browsers Are Pursuing Deep Privacy Protections
conference talk
USENIX Enigma
2019
-
Browser Feature Usage on the Modern Web
invited talk
UIC SIG Security
2017
-
Carnival of Privacy and Security Delights
conference presentation
- Jason Archer
- Nathanael Bassett
- Peter Snyder
AoIR
2016
-
Doxing and the Dark Web: Detecting, Measuring and Addressing Malicious
Information Disclosures Online
invited talk
Homewood-Flossmoor Science Pub
2016
-
No Please, After You: Detecting Fraud in Affiliate Marketing
Networks
invited talk
Department of Information Engineering at the CUHK,
hosted by Prof. Zhang Kehuan 張克環教授
2015
-
No Please, After You: Detecting Fraud in Affiliate Marketing Networks
invited talk
DePaul University's Security Daemon's group
2015
-
One Thing Leads to Another: Credential Based Privilege Escalation
poster
CODASPY
2015
-
Serving Two Masters: An Empirical Study of Browser API Cooptation
Student Knowledge Exchange at Notre Dame
2015
-
Cloudsweeper:
Enabling Data-Centric Document Management for Secure Cloud Archives
poster
GCASR
2014
-
Surveillance
Defense: Small Easy Steps for Security and Privacy
invited talk
The Media Consortium
2014
-
PageGraph
PageGraph is an under-development, research effort to instrument Brave, blink and v8, to allow
for complete attribution of document modifications, network requests, script execution, and privacy-relevant
Web API accesses.
-
Fingerprinting Protection Improvements in Brave Browser
Improved the technique used to block fingerprinting related Web API methods
to reduce the impact on non-fingerprinting related code, and expanded the set
of blocked Web API methods to cover five more, previously allowed, methods used for
fingerprinting users.
-
Web API Manager Browser Extension
WebExtension, cross-browser extension that allows users to improve their privacy and security
online by controlling what browser functionality web hosts have access to. Web API functionality access controls can be
defined in general, or on a per host level, and can allow, for example, only trusted hosts to have access to privacy-risky
browser functionality like high resolution timers, WebGL and WebRTC.
-
Cloudsweeper
Webservice tool to measure and mitigate the frequency of plaintext password sharing in Gmail
archives. The public tool allows users to redact or encrypt-in-place found passwords. The site has had over 2,500
users and has secured over 38,000 messages
-
CDF: Abstractions for
Security Guarantees in Interactive Web Applications
Built client and server-side tools for implementing CDF, a document format for building dynamic,
interactive web applications that provide increased security and privacy guarantees for users of
commodity
web browsers.
-
Machine
Learning for Automatic 8bit Song Generation
Library to write original NES chip-style soundtracks using a corpus of 39 classic NES games and
machine learning.
-
Objective-C Dijkstra implementation
Library to perform Dijkstra in Objective-C (for iOS and OSX).
-
FormBug
A Firefox extension to make dealing and developing form based applications easier. I just
maintain it now, but wrote it back when I was doing web development work.
