Research Overview
My research focuses on the political dimensions of technical systems, specifically exploring issues related to privacy and control, such as censorship circumvention, surveillance, and secure communication methods—an area of study broadly referred to as Internet Freedom. I am particularly interested in how authoritarian governments deploy information controls to limit access to information and how technology can be leveraged to counter these mechanisms. By developing a rigorous understanding of the technical limitations of censorship technologies, I aim to craft practical solutions that empower individuals living under repressive regimes.
Current Projects
Details on my current projects include innovative approaches to secure communication and the analysis of existing vulnerabilities in popular systems. For instance, my recent work involves developing methods for the secure dissemination of radio signals and investigating the vulnerabilities of VPN protocols, highlighting the intricate relationship between technical design and political implications.
Publications
-
Beyond OS Trust Stores: TLS Trust in Russia’s Android Ecosystem
Proceedings of the 2026 Workshop on Free and Open Communications on the Internet (FOCI 2026)
Co-located with the Privacy Enhancing Technologies Symposium (PETS)
Calgary, AB, Canada, July 2026 -
Architectural VPN Vulnerabilities, Disclosure Fatigue, and Structural Failures
Proceedings of the 2026 Workshop on Free and Open Communications on the Internet (FOCI 2026)
Virtual event, February 2026 -
CVE-2024-49734: Persistent Side-Channel Inference of VPN-Tunneled TCP Connections
Android Security Bulletin, January 2025
(CVE-2024-49734). -
Blind In/On-Path Attacks and Applications to VPNs
Proceedings of the 30th USENIX Security Symposium (USENIX Security 2021)
Virtual event, August 2021 -
CVE-2019-14899: Inferring and Hijacking VPN-Tunneled TCP Connections
oss-security mailing list, December 4, 2019 (CVE-2019-14899). -
CVE-2019-9461: Android VPN Routing Information Disclosure Through Cleartext Responses
Reported through the Android Security Rewards Program and published in the Pixel Update Bulletin, September 2019 ; subsequently included in the oss-security disclosure, December 4, 2019 (CVE-2019-9461). -
Alice and Bob, Who the FOCI Are They?: Analysis of End-to-End Encryption in the LINE Messaging Application
Proceedings of the 7th USENIX Workshop on Free and Open Communications on the Internet (FOCI 2017)
Vancouver, BC, Canada, August 2017