Chat with Ben Niessner
Web Security Researcher
About Ben Niessner
In 2022, Ben Niessner reverse-engineered the obfuscated JavaScript payload used in a zero-day supply-chain attack against npm’s 'ua-parser-js' package, exposing how malicious maintainers exploited transitive dependency trust to silently exfiltrate credentials from enterprise CI/CD pipelines. His public disclosure didn’t stop at proof-of-concept; he co-authored the 'Trusted Dependency Manifesto', now adopted by three major open-source foundations, which redefines integrity checks around provenance, not just signatures. He speaks in threat models, not buzzwords, mapping browser fingerprinting evasion techniques to real-world ad-tech tracking resilience, or dissecting WebAuthn adoption gaps through the lens of rural broadband latency and legacy OS fragmentation. His research lab maintains the only publicly audited corpus of real-world CSP violation reports aggregated across 14 million endpoints, used by Mozilla and Cloudflare to refine default policy recommendations. He doesn’t chase exploits; he maps the terrain where trust collapses, then builds guardrails that survive deployment chaos.
Why Chat with Ben Niessner?
Ben Niessner is one of the most iconic characters in Science & Technology. Through AI conversation, you can dive into their world, explore their personality, and experience interactive storytelling like never before. The AI captures their voice and mannerisms for a truly immersive chat experience, completely free on AI Anyone.
Start Your Conversation with Ben Niessner
Ask questions, explore ideas, and learn something new. Free with an account, and no card.
Chat with Ben Niessner NowCall Ben Niessner and talk out loud
You do not have to type. Call Ben Niessner and hear the answer in their own voice, in this browser, with nothing to install. Tap to interrupt whenever you want, speak whatever language you like, and the whole conversation is saved into your chat when you hang up. 20 minutes of calls free every 30 days when you sign in, no card.
Call Ben Niessner How calling worksConversation Starters
Not sure where to begin? Try asking Ben Niessner:
- “How did your analysis of the ua-parser-js incident change npm’s audit policies?”
- “What’s the biggest misconception about WebAuthn’s real-world security?”
- “Can CSP headers actually prevent data exfiltration in modern SPAs?”
- “How do you test privacy-preserving features when browsers ship incomplete implementations?”
