Shubham Agarwal

Scientific Researcher @MPI-SP | Web Security Researcher

[Aurore Fass @AuroreFass]

No award in 2025? Here is another chance: @chwress, Deepak Kumar, and I are looking for (self) nominations for @USENIXSecurity '26 Artifact Evaluation Committee!

Remember to fill the nomination form by Friday, October 17: https://t.co/e5J18MoUcP

And, help us spread the word!🚀

[Shubham Agarwal @ap0ca1pse]

@freddyb Well, putting Sec-Fetch-Site and Sec-Fetch-Dest to use could be a real good idea (as is the case here 😅). I don’t think many applications do that, though.

[Shubham Agarwal @ap0ca1pse]

Looking forward to presenting our research work tomorrow at @acm_ccs! Join us at Web Security II Session right after lunch (13:30).

[Phani Vadrevu @pvadrevu]

@AuroreFass and I are pleased to invite (self-)nominations for @USENIXSecurity '25 Artifact Evaluation Committee . This year's "Open Science" policy requires heavy support from our community. Please fill this form by October 11 to express interest: https://t.co/6CWOpOiMF1 1/2

[Aurore Fass @AuroreFass]

The Call for Papers for #MADWeb 2025 (Workshop on Measurements, Attacks, and Defenses for the Web @NDSSSymposium) is out!
Given the recent merge with #SecWeb, #MADWeb 2025 extended its areas of interest. Check it out https://t.co/0GPw4db9hH ☀️

[Giada Stivala @g_stivala]

🚀 Calling all IT pros in hosting companies & web agencies! 🚀
We're researchers from @CISPA and we're studying Hosting Maintenance&Operations. Join us for an interview!

- Gain insights
- Contribute to better procedures
- Get compensated

Info via DM or at [email protected]

[Ben Stock @kcotsneb]

I am looking to expand my group with new PhDs! But just applying would be too boring, right? So, first you will have to solve a little bit of challenge :-) Check https://t.co/GH7MUYEK5u to learn more on what your task is! Beyond that fun, what will you do in your PhD?

[Aurore Fass @AuroreFass]

#MADWeb 2024 deadline is 5 weeks away!
We have an awesome PC and are looking forward to your Web Security & Privacy papers. We also welcome preliminary and provocative work. Join us in Sunny San Diego!
Paper submission deadline: Jan 10 AoE
CfP: https://t.co/0GPw4dbH7f
CC @yzcao

[Aurore Fass @AuroreFass]

I’m incredibly excited to be back at CISPA!

Now, I’m looking for PhD students in the areas of Web Security & Privacy, and Web Measurement; with a specific focus on JavaScript (in)security and browser extensions.

[Aurore Fass @AuroreFass]

The Web is going MAD again! Join us for the 6th #MADWeb (Measurements, Attacks, and Defenses for the Web) workshop @NDSSSymposium on March 1, 2024! Please, help us spread the words.
Paper submission deadline: Jan 10 AoE
CfP: https://t.co/0GPw4db9hH
CC @yzcao

[Florian @fh4ntke]

Hey 👋 Are you responsible for a website as an operator, CISO, ..? What do you think about researchers hacking your website - OK or a no-go? Help us make security research more beneficial for operators! Learn more and sign up for an interview at https://t.co/UwUH9E8AMf. Retweet🙏

[RuhrSec – IT Security Conference @ruhrsec]

Is your web site protection consistent?
Join @s3br0th and @kcotsneb on their latest research journey.

RuhrSec Ticketshop
👉 https://t.co/LiC7f1AIeq

🌐 https://t.co/sUEG9mxozf

#itsecurity #itsicherheit #conference #cybersecurity
#securityconference #ITtalk #IT #ITCompanies

[Aurore Fass @AuroreFass]

We are extending the #MADWeb deadline (co-located with @NDSSSymposium) to January 6.
Looking forward to your Web Security & Privacy papers! Please, help us spread the words!
CfP: https://t.co/0GPw4dsK9f
@zubair_shafiq @kapravel @nicknikiforakis @o_starov @robperdisci

[Shubham Agarwal @ap0ca1pse]

Perfect venue to present and get feedback from the community on your interesting ideas or even work-in-progress. The deadline is just less than a month away!

[Aurore Fass @AuroreFass]

One month left to submit your cool Web Security & Privacy research to #MADWeb! Let's make the Web a safer place! Please, help us spread the words

[Shubham Agarwal @ap0ca1pse]

Here at @acm_ccs for my first in-person conference where I will also present my work on inadvertent security impact of browser extensions on the client-side. Looking forward to meeting new people.

[Aurore Fass @AuroreFass]

The Web is going MAD again! Join us for the 5th #MADWeb workshop @NDSSSymposium 2023!
Please consider submitting your awesome Web Security & Privacy research (deadline: Dec 9 AoE), and help us spread the words!
CFP: https://t.co/0GPw4dsK9f
@zubair_shafiq

[Sebastian Roth @s3br0th]

You are a Web developer, want to learn something new, and get 50€? We are conducting a study to understand the challenges of deploying a mechanism to defend against client-side XSS.
So, if you are interested, please visit https://t.co/8KphJfFqAd and/or share this invitation.

[Sebastian Roth @s3br0th]

Ever wondered if all clients get the same level of security?
In our newest @USENIXSecurity paper, we discovered that sometimes the configuration of security headers depends on client characteristics.
Read it here: https://t.co/tDIFqJP5O7
CC: @stecalzavara @kcotsneb @CISPA

[Ben Stock @kcotsneb]

We recently learned that our 2021 #MADWeb paper had two critical errors in it (see https://t.co/YNXFv30WuU), which led to potentially many false positives of header manipulations by extensions, i.e., the results are plain wrong. We have now asked the chairs to withdraw our paper