Projects
Adversarial in the useful sense: they hand an ordinary person some leverage over their own identity.
6 of them. All open source, all open to contribution.
Side work, mostly built to make an argument concrete. It is easier to discuss privacy through obfuscation when you can run the thing and watch it flood the signal.
Death Notification
How a death becomes known: who pronounces and certifies it, who must register it and by when, and how far the fact then travels — to population registers, pensions, tax and the electoral roll, and to banks, insurers and platforms — without the family having to repeat it. Mapped jurisdiction by jurisdiction from primary law and official policy only. Research for the OpenID Death and the Digital Estate effort, alongside Digital Estate Roles.
Digital Estate Roles
A sourced reference for when legal authority over a person, their property and their digital estate is assigned, when it starts and when it ends — powers of attorney, health-care agents, guardians, executors, digital-asset fiduciaries, benefits payees and organ-donation decision makers, across nine countries. Primary law and official policy only. Research for the OpenID Death and the Digital Estate effort.
Sigillo
An iOS camera that signs a photograph at the moment of capture — C2PA Content Credentials and an RFC 3161 timestamp embedded before the image is ever shown, asserting that this was made by a lens on this device. The inverse of Ruse: rather than breaking recognition, it makes provenance travel with the file.
Shared-Signals.Dev
A developer resource for the Shared Signals Framework: the standards explained, every CAEP and RISC event type catalogued, and a live playground — sample transmitter, sample receiver and a SET inspector, built to the CAEP Interoperability Profile — so the standard can be tried rather than only read. Written from the ground up, and open.
Ruse
A camera application that alters a photograph so it stays legible to a human being and useless to a facial recognition system. Adversarial protection for an ordinary face. Shown at Black Hat USA Arsenal and DEF CON Demo Labs in 2021.
Spartacus as a Service
Privacy by flooding the signal rather than hiding from it. Presented at Black Hat and the DEF CON Crypto & Privacy Village.