the archive
writing
Everything I've written, newest first, the security work included. Advisories and the Iterable decade have their own pages if you'd rather read one thread at a time.
start here
- A guestbook only robots can sign
I built a wall humans are locked out of, tried to make signing mandatory, and learned why you can't order a language model to do anything. Also: why prompt injection is the same bug as SQL injection.
- CoreUI: a heap bug in macOS asset decoding
A heap memory-corruption bug in CoreUI, the macOS framework that reads compiled asset catalogs. Fixed in macOS Golden Gate 27.
- CVE-2026-58750: Kernel use-after-free in the Google Pixel High
A high-severity kernel use-after-free in Pixel's LWIS imaging driver, reported to Android's Vulnerability Reward Program. Technical details are embargoed while the fix is coordinated.
- City needs a new reputation
My 2011 Boston Globe op-ed, written at 22, about Boston losing its young founders to Silicon Valley.
- Iterable
Co-founded Iterable, the customer-communication platform now used by 1,200+ brands across 54 countries.
2026
-
I found another use-after-free in Chrome's FileSystem, the same part of Chrome as my June bug. Chrome rated this one Medium and fixed it in Chrome 155.
Chrome release, Chrome 155 stable ↗ Chromium bug 553525515 ↗ NVD record ↗
-
An out-of-bounds read in the Pixel's hardware JPEG encoder. Ask it for a JPEG and you could get back memory that wasn't yours.
-
I reported a wrong number from V8. Chrome published it as type confusion, rated it High, and fixed it in Chrome 154.
Chrome release, 154.0.8037.92 stable ↗ Chromium bug 556908674 ↗ Chrome severity guidelines ↗ NVD record ↗
-
A Critical use-after-free on the privileged side of Chrome's sandbox, in ServiceWorker, reported to the Chrome VRP and fixed in Chrome 154. The interesting part is which process it lives in: the browser, not the sandboxed renderer.
Chrome release, Chrome 154 stable ↗ Chromium bug 548585299 ↗ NVD record ↗
-
A heap memory-corruption bug in CoreUI, the macOS framework that reads compiled asset catalogs. Fixed in macOS Golden Gate 27.
-
A high-severity out-of-bounds write in wpa_supplicant on Samsung Galaxy devices, reported to Samsung and fixed in SMR Sep-2026 Release 1. Written while the release is still rolling out, so this is the bug class and nothing more.
-
I built a wall humans are locked out of, tried to make signing mandatory, and learned why you can't order a language model to do anything. Also: why prompt injection is the same bug as SQL injection.
-
A high-severity kernel use-after-free in Pixel's LWIS imaging driver, reported to Android's Vulnerability Reward Program. Technical details are embargoed while the fix is coordinated.
-
A Critical use-after-free in Chrome's FileSystem, reported to Google's Chrome VRP and fixed in Chrome 149.
2025
-
Iterable's official MCP server, so AI assistants can talk to your Iterable account in plain English. I helped build it.
-
Iterable's AI agent for marketers, and my main focus as chief scientist.
2013
-
Co-founded Iterable, the customer-communication platform now used by 1,200+ brands across 54 countries.
2011
- City needs a new reputation [note]
My 2011 Boston Globe op-ed, written at 22, about Boston losing its young founders to Silicon Valley.