activity
20242026
most citedUnbundle-Rewrite-Rebundle: Runtime Detection and Rewriting of Privacy-Harming Code in JavaScript Bundles

2 citations · 5 across the 11 of their papers we have counts for

collaborators

11 papers

cs.AI2026

SPILLage: Agentic Oversharing on the Web

Jaechul Roh, Eugene Bagdasarian, Hamed Haddadi +1

LLM-powered agents are beginning to automate user's tasks across the open web, often with access to user resources such as emails and calendars. Unlike standard LLMs answering ques…

cs.CR2025

Privacy Practices of Browser Agents

Alisha Ukani, Hamed Haddadi, Ali Shahin Shamsabadi +1

This paper presents a systematic evaluation of the privacy behaviors and attributes of eight recent, popular browser agents. Browser agents are software that automate Web browsing…

cs.LG2025

Membership and Memorization in LLM Knowledge Distillation

Ziqi Zhang, Ali Shahin Shamsabadi, Hanxiao Lu +2

Recent advances in Knowledge Distillation (KD) aim to mitigate the high computational demands of Large Language Models (LLMs) by transferring knowledge from a large ''teacher'' to…

cs.CR2025

Local Frames: Exploiting Inherited Origins to Bypass Content Blockers

Alisha Ukani, Hamed Haddadi, Alex C. Snoeren +1

We present a study of how local frames (i.e., iframes loading content like "about:blank") are mishandled by a wide range of popular Web security and privacy tools. As a result, use…

cs.CR2025

Measuring the Accuracy and Effectiveness of PII Removal Services

Jiahui He, Pete Snyder, Hamed Haddadi +2

This paper presents the first large-scale empirical study of commercial personally identifiable information (PII) removal systems -- commercial services that claim to improve priva…

cs.CR2025

NoEsis: Differentially Private Knowledge Transfer in Modular LLM Adaptation

Rob Romijnders, Stefanos Laskaridis, Ali Shahin Shamsabadi +1

Large Language Models (LLM) are typically trained on vast amounts of data from various sources. Even when designed modularly (e.g., Mixture-of-Experts), LLMs can leak privacy on th…

cs.CR2025

Web Execution Bundles: Reproducible, Accurate, and Archivable Web Measurements

Florian Hantke, Peter Snyder, Hamed Haddadi +1

Recently, reproducibility has become a cornerstone in the security and privacy research community, including artifact evaluations and even a new symposium topic. However, Web measu…

cs.CY2024★ 1 cited

Secure and Confidential Certificates of Online Fairness

Olive Franzese, Ali Shahin Shamsabadi, Carter Luck +1

The black-box service model enables ML service providers to serve clients while keeping their intellectual property and client data confidential. Confidentiality is critical for de…

cs.CR2024★ 1 cited

Nebula: Efficient, Private and Accurate Histogram Estimation

Ali Shahin Shamsabadi, Peter Snyder, Ralph Giles +2

We present \textit{Nebula}, a system for differentially private histogram estimation on data distributed among clients. \textit{Nebula} allows clients to independently decide wheth…

cs.NI2024★ 1 cited

A First Look at Related Website Sets

Stephen McQuistin, Peter Snyder, Hamed Haddadi +1

We present the first measurement of the user-effect and privacy impact of "Related Website Sets," a recent proposal to reduce browser privacy protections between two sites if those…

cs.CR2024★ 2 cited

Unbundle-Rewrite-Rebundle: Runtime Detection and Rewriting of Privacy-Harming Code in JavaScript Bundles

Mir Masood Ali, Peter Snyder, Chris Kanich +1

This work presents Unbundle-Rewrite-Rebundle (URR), a system for detecting privacy-harming portions of bundled JavaScript code and rewriting that code at runtime to remove the priv…