I'm a third-year PhD student in Computer Science at Cornell Tech, working with
Vitaly Shmatikov on privacy,
security, and AI. I'm an NSF Graduate Research
Fellow, and was previously supported by a
Cornell University Fellowship.
From February to August 2026, I was a Student Researcher at Google, working on
LLM post-training to make agents safer and less prone to meltdowns.
From 2021 to 2024, I was a Senior Privacy Engineer at the
Wikimedia Foundation, working on
differential privacy, algorithmic accountability and transparency, and global
accessibility. I'm still working with Wikimedia Enterprise on using Wikimedia's
public data for quick and accurate geolocated trend analysis.
I also sometimes write and edit for Reboot
and Kernel Magazine.
I did a B.S. in Computer Science and a B.A. in History at Brown University,
graduating in December 2020.
I played keys and wrote music with
Birdnest from 2021 to 2024,
and was a founding member of Honeycomb
before that. My new project, Trouble Department, is coming soon.
Recent updates
Research
-
Agent Meltdowns: The Road to Hell Is Paved with Helpful Agents.
RDJ*, HT*, AB, VS. NeurIPS, 2026.
-
Deep-Research Agents Can Be Poisoned via User-Generated Content.
TZ*, HT*, VS. Preprint, 2026.
-
Reinforcing privacy reasoning in LLMs via normative simulacra from fiction.
MF, MZC, HT, HN. COLM, 2026.
-
Open and Emergent Problems in Agentic Privacy and Security: A Contextual Angle.
50+ authors; I led the threat model section. Workshop report, 2026.
-
Breaking and Fixing Defenses Against Control-Flow Hijacking in Multi-Agent Systems.
RDJ, HT, JW, VS. ICLR, 2026.
-
“Having Confidence in My Confidence Intervals”: How Data Users Engage with Privacy-Protected Wikipedia Data.
HT, JS, PN, RC, GK, SK, ER. CHI, 2026.
-
What Did Elon Change? A Comprehensive Analysis of Grokipedia.
HT, AM. Preprint, 2025.
-
MillStone: How Open-Minded Are LLMs?
HT, VS. Preprint, 2025.
-
zk-Cookies: Persistent Anonymous Credentials for the Web.
AF*, HT*, IM. IACR ePrint, 2025.
-
Multi-Agent Systems Execute Arbitrary Malicious Code.
HT, RDJ, VS. COLM, 2025.
-
SPINACH: SPARQL-Based Information Navigation for Challenging Real-World Questions.
SL, SS, HT, JX, IDZ, ML. EMNLP, 2024.
-
Publishing Wikipedia usage data with strong privacy guarantees.
TA, SB, DD, MH, IJ, CL, AM, TM, GM, DP, DSM, HT. TPDP, 2023.
-
Publishing Wikipedia Project Usage Data with Strong Privacy Protections and without Tracking.
HT. USENIX PEPR, 2022.
-
A New Model for Weaving Responsible Computing Into Courses Across the CS Curriculum.
LC, HP, HT, KF. SIGCSE, 2021.
-
Detecting Large Vessel Occlusion at Multiphase CT Angiography by Using a Deep Convolutional Neural Network.
MS, JV, MD, YHK, SS, HT, AW, HLW, AY, MJ, JB, CE, UC, GB, RM. Radiology, 2020.
Projects
- Wikimedia Enterprise pageview trends. An enterprise trend tool built on open-source and privatized Wikimedia pageview data (2024–present).
- Differential privacy at Wikimedia. Built data infrastructure and processes for using differential privacy at the Wikimedia Foundation, increasing the amount of pageview data WMF releases by 40x.
- DP pageviews. A site for visualizing trends in differentially private Wikimedia datasets (2024 Wikimedia Hackathon).
- SpinachBot. An on-wiki agent that generates SPARQL queries from natural-language questions.
More code on GitHub and
Wikimedia GitLab.
Service
Writing
- AI Alignment Is Censorship (editor). Reboot, 2025.
- Threat Model: a deep dive into the paranoid world of extreme privacy. Reboot, Nov 2023.
- Port Paradox: An oil terminal's new beginning (editor). Kernel, Sep 2023.
- Towards ineffective altruism. Reboot, May 2022.
- Unclaimed bodies: What happens to those who die alone in RI? The Providence Journal, Jan 2022.
- Where algorithmic transparency meets community. Reboot, Nov 2021.
- For nearly a decade, two RI opioid manufacturers made billions of opioid doses. The Public's Radio, Oct 2021.
- Divorces are down in RI during the pandemic. The Providence Journal, Mar 2021.
- Ballot counting in Fall River is secure. We saw it firsthand. The Fall River Herald News, Nov 2020.
- The opioid influencers. Brown Opioid Journalism Project, 2020.
- What Brown Could Pay: Brown's property tax exemption and the crisis of public school funding. The College Hill Independent, Nov 2019.
- Sealing the Deal: Competing narratives of conservation in the Narragansett Bay. The College Hill Independent, Apr 2019.
- A System of Espionage: Credit, Surveillance, and Financial Identity in Industrial-Age America. Undergraduate paper, 2018.
- A Future You Can Believe In: China and the advent of the Social Credit System. The College Hill Independent, Feb 2018.
