I am a Program Manager at Brave and a cybersecurity and privacy researcher. I build open-source security tools and write practical guides for understanding how software handles data. I hold an MS in Cybersecurity from Northeastern University.
Website · Research · Google Scholar · LinkedIn
| Project | What it does |
|---|---|
| Site Behavior Lab | Records requests, cookies, storage, browser signals, and consent behavior during automated website visits. Reports connect findings to recorded evidence and explain scan conditions and coverage limits. |
| Brave Nightly Change Tracker | A public review interface for merged brave/brave-core pull requests and changes relevant to Brave Nightly. |
| Trace | Uses Rust and WebAssembly to check iPhone sysdiagnose archives for known spyware indicators locally in the browser. Reports distinguish findings from incomplete coverage; a scan cannot establish that a device is free of compromise. |
| Metadata Remover | Inspects and removes structural metadata from supported images, documents, audio, and video locally in the browser, then checks cleaned files again. It does not remove sensitive information visible in the content itself. |
| QRWarden | A pre-release QR inspector that displays decoded content and URL properties without visiting the destination during inspection. It does not certify that a link is safe. |
I write and curate practical guides for Google account security, iOS hardening, GrapheneOS, and GitHub security. More work is collected on my projects page.
Some examples of my accepted contributions to other projects:
- SimpleX Chat: Independently reproduced the v6.3.1 server release build; acknowledged in the official release with a published checksum signature (March 2025).
- Hush Line: privacy-policy additions and clarifications, merged March 2024. The draft whitepaper also acknowledges my DevSecOps contribution.
- Ente PrivacyPack: response-header hardening and runtime updates, catalog validation and browser tests, multiple privacy alternatives per category, and mobile builder/export layout improvements, integrated in April–May 2026. I also contributed security-policy wording and formatting improvements to Ente in 2024.
- Kagi: added Ente Auth to its two-factor authentication documentation, merged March 2024.
I coauthored three conference papers: two indexed in IEEE Xplore and one published in Springer conference proceedings.
- Quantum-Resilient Zero-Trust Architectures in Edge Computing Networks: Theoretical Foundations and Complexity Bounds — IEEE ICCA 2025.
- Lightweight Multi-Tenant Security Isolation for Resource-Constrained Edge Computing Platforms: A Theoretical Framework — IEEE EdgeCom 2025.
- Adaptive Fuzzy Logic Framework for Context-Aware Blockchain Security — CISCom 2025; Springer, Computational Intelligence and Soft Computing, CCIS volume 2853, pp. 191–199.
My research on the privacy of fitness wearables received grant support from the Ludlow Institute through Timechain Consulting.
- PHP2Shell: Inc42 quoted my commentary on exploitation risks and reviewing pre-patch activity. Piață de Afaceri also carried those comments in Romanian.
- Browser privacy: PCWorld, Windows Latest, and Clubic covered my Microsoft Edge Secure Network analysis. Heise published a discussion and critique.
- Messaging privacy: The Times of India and PiunikaWeb covered my public critique of X Chat's privacy and security claims.
- Privacy and social engineering: Analytics India Magazine quoted or discussed my work on AI-enabled voice phishing, photo and biometric privacy, and consent models.
- Security education: Bitwarden featured my security guide in its community spotlight.
I founded null NEU at Northeastern University and null Boston as a separate city chapter. At null NEU, I served as Chapter Lead / President and later as an advisor, organizing cybersecurity education and mentoring students. The official chapter page lists me among its leaders, and my null Community profile records selected speaking sessions.
I also previously taught Digital Forensics and Incident Response as adjunct cybersecurity faculty at Lasell University.
For public, non-sensitive questions about my work, mention @iAnonymous3000 on X. For private security reports, use the routes on my contact page.
If you find my work useful and want to support it, I accept donations via privacy-preserving cryptocurrencies:
Monero (XMR)
882aSLEXeL19CnSsJ3icFWirV4Q2riEmr9sv7rLu21yLBphjMXc4zCViMmW1NTFjSuKtyNSQjkCrR6e9FqhKV399Muj6gs6
Zcash (ZEC)
u15sc93jcpngdtpx7tr0whpqtzfhmdvp45507c6tg495mcm2x8ryyllsg8pgnzjqcywuka6uevrnn56s60raazk7g5zf206ltcn6ujw6jalndvy77zse69prrcw5203rndlnwuwk37v8knawx5lx5kdssp75t60pjq4rx8fsy0eygl5z2evnkxv7m8v0x20jv2k9aht37agduws2z5cx9
