Google Topics API Privacy Audit
Measured whether Google's Topics API can be abused to infer users' demographics and sensitive interests from browsing history. Found predictive signals in 17 of 19 traits.
- Python
- scikit-learn
- JavaScript

I'm a final-year PhD candidate at Northeastern University.
My research focuses on building tools to understand security and privacy issues on the web. Lately, I've also been building AI agents that can perform general tasks, and exploring the implications of agent skills. I write about what I find, and I'm actively looking for full-time roles and postdoc positions in industry or academia.
Measured whether Google's Topics API can be abused to infer users' demographics and sensitive interests from browsing history. Found predictive signals in 17 of 19 traits.
Built a distributed crawler and audit pipeline to measure CCPA opt-out signal propagation across thousands of top websites, revealing widespread failures in enforcement.
Co-authored the Third Parties chapter of the 2025 HTTP Archive Web Almanac, analyzing third-party resource usage across millions of websites.
First large-scale analysis of Google Search's market share under vertical segmentation, using real browsing trace data from a US panel.