About
Data analyst, psychology student, and programmer. Writes about browser security architecture, cognitive science, political psychology, and the intersection of technology with society.
Research
-
Assessment over Authority: Methodology, Threat Modeling, and the False Binary in Browser Security5 min readA direct response to critics of the prior research, defending the methodology behind the dual-engine analysis, the primacy of threat modeling over arbitrary mitigation comparisons, and why security is a choice between paradigms, not a linear scoreboard.
-
Comparative Analysis of Sandboxing and Mitigation Philosophies in Mobile User-Agent Architectures15 min readThreat-modeling analysis of GeckoView vs. Chromium security architectures on Android, examining process isolation, Rust memory safety, extension infrastructure, privacy convergence, and monoculture risk.
-
Follow-up investigation revisiting the prior mobile browser security analysis. Documents new discoveries (Chromium's mitigations portfolio, isolatedProcess architecture gap, Fission deployment status) and reaffirms the core findings that survived scrutiny.