Peter Snyder - Senior Privacy Researcher and Director of Privacy, Brave Software

I am the senior privacy researcher and director of privacy at Brave Software, where I work on new ways to improve privacy and security on the web, and to measure the risk of new threats to Brave browser users.

I am the senior privacy researcher at Brave Software, where I work on new ways to improve privacy and security on the Web, and to fix new threats to Brave browser users. I work under Ben Livshits, Brendan Eich and alongside a wonderful team of researchers, engineers and privacy experts.

I also co-chair PING, the group in the W3C that reviews spec proposals for privacy risks and concerns.

Before joining Brave, I worked on my PhD in the Computer Science department at the University of Illinois at Chicago in the BITS Lab, working under the kind and knowledgable guidance of Chris Kanich.

Research Interests

I research web security and privacy, including browser hardening techniques and measuring how the growth of the Web API has impacted user privacy and security. I use this research to build access control systems for browser functionally and tools for deploying web applications that provide stronger privacy and security guarantees for users.

Publications

SugarCoat: Programmatically Generating Privacy-Preserving, Web-Compatible Resource Replacements for Content Blocking
1. Michael Smith
2. Peter Snyder
3. Ben Livshits
4. Deian Stefan
CCS 2021 code dataset
Towards Realistic and Reproducible Web Crawl Measurements
1. Jordan Jueckstock
2. Shaown Sarker
3. Peter Snyder
4. Aidan Beggs
5. Panagiotis Papadopoulos
6. Matteo Varvello
7. Ben Livshits
8. Alexandros Kapravelos
WWW 2021 arxiv code dataset
Detecting Filter List Evasion With Event-Loop-Turn Granularity JavaScript Signatures
1. Quan Chen
2. Peter Snyder
3. Ben Livshits
4. Alexandros Kapravelos
S&P 2021 arxiv dataset slides
Who Filters the Filters: Understanding the Growth, Usefulness and Efficiency of Crowdsourced Ad Blocking
1. Peter Snyder
2. Antoine Vastel
3. Ben Livshits
SIGMETRICS 2020 arxiv slides
Filter List Generation for Underserved Regions
1. Alexander Sjosten
2. Peter Snyder
3. Antonio Pastor
4. Panagiotis Papadopoulos
5. Ben Livshits
WWW 2020 arxiv dataset
Keeping Out the Masses: Understanding the Popularity and Implications of Internet Paywalls
1. Panagiotis Papadopoulos
2. Peter Snyder
3. Dimitrios Athanasakis
4. Ben Livshits
WWW 2020 arxiv
AdGraph: A Machine Learning Approach to Automatic and Effective Adblocking
1. Umar Iqbal
2. Peter Snyder
3. Shitong Zhu
4. Ben Livshits
5. Zhiyun Qian
6. Zubair Shafiq
S&P 2020 arxiv blog
SpeedReader: Reader Mode Made Fast and Private
1. Mohammad Ghasemisharif
2. Peter Snyder
3. Andrius Aucinas
4. Ben Livshits
WWW 2019 arxiv
Most Websites Don’t Need to Vibrate: A Cost–Benefit Approach to Improving Browser Security
1. Peter Snyder
2. Cynthia Taylor
3. Chris Kanich
CCS 2017 code slides
Fifteen Minutes of Unwanted Fame: Detecting and Characterizing Doxing
1. Peter Snyder
2. Periwinkle Doerfler
3. Chris Kanich
4. Damon McCoy
IMC 2017 code slides
CDF: Predictably Secure Web Documents
1. Peter Snyder
2. Laura Watiker
3. Cynthia Taylor
4. Chris Kanich
ConPro 2017 code slides
Browser Feature Usage on the Modern Web
1. Peter Snyder
2. Lara Ansari
3. Cynthia Taylor
4. Chris Kanich
IMC 2016 dataset slides slides (keynote)
Characterizing Fraud and Its Ramifications in Affiliate Marketing Networks
1. Peter Snyder
2. Chris Kanich
Journal of Cybersecurity 2016 journal listing
The Effect of Repeated Login Prompts on Phishing Susceptibility
1. Peter Snyder
2. Michael K. Reiter
3. Chris Kanich
LASER 2016 slides slides (keynote)
No Please, After You: Detecting Fraud in Affiliate Marketing Networks
1. Peter Snyder
2. Chris Kanich
WEIS 2015 extended slides
"I Saw Images I Didn't Even Know I Had": Understanding User Perceptions of Cloud Storage Privacy
1. Jason Clark
2. Peter Snyder
3. Damon McCoy
4. Chris Kanich
CHI 2015
Cloudsweeper and Data-Centric Security
1. Peter Snyder
2. Chris Kanich
ACM SIGCAS Computers and Society 2014 listing
Cloudsweeper: Enabling Data-Centric Document Management for Secure Cloud Archives
1. Peter Snyder
2. Chris Kanich
CCSW 2013

Popular Press

Google pledges not to build backdoors in FLoC but not everyone's convinced AndroidCentral Jun 02, 2021 news
We Checked 250 iPhone Apps—This Is How They’re Tracking You The WireCutter (NYT) May 06, 2021 news
Google and the Age of Privacy Theater Wired Mar 18, 2021 news
What's Up with the Apple App Store's Privacy Changes? TheMarkup Mar 16, 2021 news
How Apple, Google, and other browser makers are quietly duking it out over the future of the web Business Insider Dec 22, 2020 news
Google Chrome's crackdown on ad blockers and browser extensions, Manifest v3, is now available in beta The Register Dec 10, 2020 news
The digital switch that blocks all websites from selling your personal data DigitalTrends Nov 23, 2020 news
I Scanned the Websites I Visit with Blacklight, and It’s Horrifying. Now What? TheMarkup Sep 22, 2020 news
Google Is Working On A New Web Standard Called WebBundles Which Is Dangerous To The Privacy Of Internet Users, Security Researchers Warned Digital Information World Sep 01, 2020 news
Brave Takes Brave Stand Against Google's Plan to Turn Websites into Ad-Blocker-Thwarting Web Bundles The Register Aug 27, 2020 news
Google’s New Web Standard Could Disable Your Ad-Blocker TechRadar Aug 27, 2020 news
The Battle for Your Privacy on the Web With Pete Snyder Software Sessions Aug 12, 2020 podcast
Google's Plan for Chrome Capability has a Big Security Risk C|Net Jul 29, 2020 news
Aggrieved Ad Tech Types Decry Google Dominance in W3C Standards – Who Writes the Rules and for Whom? The Register Jul 17, 2020 news
FYI: Your Browser can pick up Ultrasonic Signals You Can't Hear, and That Sounds Like a Privacy Nightmare to Some The Register May 07, 2020 news
What the FLoC? Browser makers queue up to decry Google's latest ad-targeting initiative as invasive tracking The Register Apr 14, 2020 news
Google Chrome 80 Released With Controversial Deep Linking Upgrade Forbes Feb 23, 2020 news
Chrome Deploys Deep-Linking Tech in Latest Browser Build Despite Privacy Concerns The Register Feb 20, 2020 news
Google's Second Stab at Preserving Both Privacy and Ad Revenue Draws Fire The Register Feb 10, 2020 news
If You Want an Example of How User Concerns do not Drive Software Development, Check Out This Google-backed API The Register Dec 06, 2019 news
Protecting Your Online Privacy Science Friday Dec 01, 2017 radio
Why People Ruin Others’ Lives by Exposing All Their Data Online NewScientist Nov 13, 2017 news
First Large-Scale Doxing Study Reveals Motivations and Targets for Cyber Bullying ScienceDaily Nov 07, 2017 news
Gotta Have Standards? Security Boffins not API about Bloated Browsers The Register Oct 24, 2017 news
Privacy on the Modern Web The Provocateur Jul 31, 2017 podcast

Blog Writing

Global Privacy Control, a new Privacy Standard Proposal, now Available in Brave’s Desktop and Android Testing Versions
1. Peter Snyder
2. Anton Lazarev
Brave Blog Oct 07, 2020
WebBundles Harmful to Content Blocking, Security Tools, and the Open Web (Standards Updates #2)
1. Peter Snyder
Brave Blog Aug 25, 2020
What’s Brave Done For My Privacy Lately #5: Grab Bag
1. François Marier
2. Pranjal Jumde
3. Ivan Efremov
4. Peter Snyder
Brave Blog Jul 20, 2020
What’s Brave Done For My Privacy Lately? Episode #4: Fingerprinting Defenses 2.0
1. Peter Snyder
2. Brian Johnson
3. Ben Livshits
Brave Blog May 18, 2020
What’s Brave Done For My Privacy Lately? Episode #3: Fingerprint Randomization
1. Mark Pilgrim
2. Peter Snyder
3. Ben Livshits
Brave Blog May 05, 2020
What’s Brave Done For My Privacy Lately? Episode #2: Third-Party Cosmetic Filtering
1. Anton Lazarev
2. Andrius Aucinas
3. Peter Snyder
4. Pete Miller
Brave Blog Feb 20, 2020
What’s Brave Done For My Privacy Lately-Episode #1: Web Resource Replacements
1. Anton Lazarev
2. Andrius Aucinas
3. Brian Bondy
4. Peter Snyder
Brave Blog Jan 23, 2020
Brave, Fingerprinting, and Privacy Budgets
1. Peter Snyder
2. Ben Livshits
Brave Blog Dec 06, 2019
Privacy Anti-Patterns In Standards
1. Peter Snyder
W3C Blog Jun 12, 2019
Brave's Concerns with the Client-Hints Proposal
1. Peter Snyder
2. Pranjal Jumde
3. Tom Lowenthal
4. Brian Clifton
Brave Blog May 09, 2019
Understanding Redirection-Based Tracking
1. Peter Snyder
2. Ben Livshits
Brave Blog Aug 12, 2018
The Mounting Cost of Stale Ad Blocking Rules
1. Antoine Vastel
2. Peter Snyder
3. Ben Livshits
Brave Blog Jul 18, 2018

Other Significant Writing

Improving Web Privacy And Security with a Cost-Benefit Analysis of the Web API 2018 My thesis, presenting a thorough measurement of WebAPI use, and ways those findings can be used to better protect the privacy and security of web users. Written for the completion of my PhD.
- slides
Yao's Garbled Circuits: Recent Directions and Implementations 2014 Literature review of performance and security developments in using Yao's Protocol for secure function evaluation. Written for my degree's "Written Critique and Presentation" requirement.
- slides

Teaching

Instructor for Software Design – UIC CS342 2017
TA for Computer Networks – UIC CS450 2017, 2015

Talks, Posters and Presentations

Best-of-Breed Content Blocking in Brave: Three Projects to Improve the Depth, Breath, and Usefulness of Blocking at Scale invited talk MADWeb 2020
- slides
Brave, Fingerprinting, and Privacy on the Web invited talk CS253 - Web Security course at Stanford 2019
- slides
- video
Privacy, Standards and Anti-Patterns invited talk PEARG at IETF 2019
- slides
Brave, Privacy and Standards invited talk WWW, W3C Track 2019
- slides
Web Privacy Beyond Extensions: New Browsers Are Pursuing Deep Privacy Protections conference talk USENIX Enigma 2019
- slides
Browser Feature Usage on the Modern Web invited talk UIC SIG Security 2017
Carnival of Privacy and Security Delights conference presentation
1. Jason Archer
2. Nathanael Bassett
3. Peter Snyder
AoIR 2016
- announcement
Doxing and the Dark Web: Detecting, Measuring and Addressing Malicious Information Disclosures Online invited talk Homewood-Flossmoor Science Pub 2016
- announcement
No Please, After You: Detecting Fraud in Affiliate Marketing Networks invited talk Department of Information Engineering at the CUHK, hosted by Prof. Zhang Kehuan 張克環教授 2015
- slides
- announcement
No Please, After You: Detecting Fraud in Affiliate Marketing Networks invited talk DePaul University's Security Daemon's group 2015
- slides
One Thing Leads to Another: Credential Based Privilege Escalation poster CODASPY 2015
Serving Two Masters: An Empirical Study of Browser API Cooptation Student Knowledge Exchange at Notre Dame 2015
- slides
Cloudsweeper: Enabling Data-Centric Document Management for Secure Cloud Archives poster GCASR 2014
Surveillance Defense: Small Easy Steps for Security and Privacy invited talk The Media Consortium 2014
- slides

Other Positions and Accomplishments

I am Brave's AC member in the W3C.
I co-chair PING, the group responsible for reviewing the privacy aspects of new web standards.
Our paper on Web API security and privacy was a finalist in the CSAW’17 Applied Research Competition.
I was a fellow in UIC's Electronic Security and Privacy IGERT.
I organized a crypto reading group at UIC.
I placed first as the Symantec Cyber Challenge Competition, held at UIC and hosted by the ESP-GERT program.
I twice served as the president for the UIC computer science graduate student association.
I advise TIMBY, a community investigating website and project, on web and application security issues.

Significant Programs and Code

PageGraph PageGraph is an under-development, research effort to instrument Brave, blink and v8, to allow for complete attribution of document modifications, network requests, script execution, and privacy-relevant Web API accesses.
- build instructions
Fingerprinting Protection Improvements in Brave Browser Improved the technique used to block fingerprinting related Web API methods to reduce the impact on non-fingerprinting related code, and expanded the set of blocked Web API methods to cover five more, previously allowed, methods used for fingerprinting users.
Web API Manager Browser Extension WebExtension, cross-browser extension that allows users to improve their privacy and security online by controlling what browser functionality web hosts have access to. Web API functionality access controls can be defined in general, or on a per host level, and can allow, for example, only trusted hosts to have access to privacy-risky browser functionality like high resolution timers, WebGL and WebRTC.
- firefox
- chrome
- code
Cloudsweeper Webservice tool to measure and mitigate the frequency of plaintext password sharing in Gmail archives. The public tool allows users to redact or encrypt-in-place found passwords. The site has had over 2,500 users and has secured over 38,000 messages
CDF: Abstractions for Security Guarantees in Interactive Web Applications Built client and server-side tools for implementing CDF, a document format for building dynamic, interactive web applications that provide increased security and privacy guarantees for users of commodity web browsers.
- code
Machine Learning for Automatic 8bit Song Generation Library to write original NES chip-style soundtracks using a corpus of 39 classic NES games and machine learning.
- source
- slides
Objective-C Dijkstra implementation Library to perform Dijkstra in Objective-C (for iOS and OSX).
- source
- cocoapods
FormBug A Firefox extension to make dealing and developing form based applications easier. I just maintain it now, but wrote it back when I was doing web development work.
- source
- firefox addon

Community Involvement

Venue	Position	Year
USENIX Security	PC Member	2021
CCS	PC Member	2021
MADWeb	PC Member	2021
WWW	PC Member	2021
SIGCOMM CCR	External Reviewer	2020
MADWeb	PC Member	2020
WWW	PC Member	2020
CSAW	PC Member	2019
Journal of Cybersecurity	External Reviewer	2019
MADWeb	PC Member	2019
DTL Grants	Reviewer	2018
CSAW	PC Member	2018
CHI Late Breaking	External Reviewer	2018
USENIX Security	External Reviewer	2017
NDSS	External Reviewer	2017
S&P	External Reviewer	2016
CCS	External Reviewer	2016
CCS	External Reviewer	2015
NDSS	External Reviewer	2013

Non-CS Bits

I was half of the Chicago chiptune band 🍒🍒💣.
I sang and played guitar in a Chicago power-pop band called The Pleasure Centers.
I volunteered tutoring Chicago high school students as part of the East Village Youth Program.
Sometimes I record chiptune music solo.
A while back I played in a LOST-themed band called Sonic Weapon Fence.

Peter Snyder Senior Privacy Researcher and Director of Privacy at Brave Software