<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom" ><generator uri="https://jekyllrb.com/" version="3.10.0">Jekyll</generator><link href="https://harrisahmad.dev/feed.xml" rel="self" type="application/atom+xml" /><link href="https://harrisahmad.dev/" rel="alternate" type="text/html" /><updated>2026-08-04T01:04:36-04:00</updated><id>https://harrisahmad.dev/feed.xml</id><title type="html">Harris Ahmad</title><subtitle>PhD CSE @ University at Buffalo | Distributed systems &amp; transactional databases for collaborative AI | Seeking SWE/research internships Spring/Summer 2027</subtitle><author><name>Harris Ahmad</name><email>harrisah@buffalo.edu</email><uri>https://harrisahmad.dev</uri></author><entry><title type="html">deadpush: guardrails for AI coding agents that commit your secrets</title><link href="https://harrisahmad.dev/writing/deadpush-ai-coding-agent-guardrails/" rel="alternate" type="text/html" title="deadpush: guardrails for AI coding agents that commit your secrets" /><published>2026-05-01T00:00:00-04:00</published><updated>2026-05-01T00:00:00-04:00</updated><id>https://harrisahmad.dev/writing/deadpush-ai-coding-agent-guardrails</id><content type="html" xml:base="https://harrisahmad.dev/writing/deadpush-ai-coding-agent-guardrails/"><![CDATA[<p>AI coding agents are great until they are not: a background run can drop API keys into <code class="language-plaintext highlighter-rouge">.env</code>, commit <code class="language-plaintext highlighter-rouge">CLAUDE.md</code> scratchpads, or rewrite half a module while you are in a meeting.</p>

<p><strong><a href="https://github.com/harris-ahmad/deadpush">deadpush</a></strong> is an always-on guardian for that failure mode.</p>

<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>pip <span class="nb">install </span>deadpush
deadpush protect <span class="nt">--hardened</span>
</code></pre></div></div>

<h2 id="the-problem-it-targets">The problem it targets</h2>

<p>When agents run with broad filesystem and git access, common failure modes include:</p>

<ul>
  <li>Hardcoded secrets and “temporary” credentials</li>
  <li>LLM context / rule files committed by accident</li>
  <li>Burst writes that create debris faster than you can review</li>
  <li>Local hooks that a determined agent can bypass unless you also enforce server-side</li>
</ul>

<h2 id="what-deadpush-does">What deadpush does</h2>

<ul>
  <li><strong>Realtime watch</strong> — monitors the repo and quarantines dangerous writes</li>
  <li><strong>Same enforcement kernel</strong> across daemon, git hooks, and MCP paths</li>
  <li><strong>Tiers</strong> — local harden/sandbox modes, plus CI / pre-receive options so violations cannot merge</li>
  <li><strong>Safety score</strong> — reacts when multiple agents go wild in parallel</li>
</ul>

<p>Details and threat model live in the <a href="https://github.com/harris-ahmad/deadpush">repo docs</a>.</p>

<h2 id="who-it-is-for">Who it is for</h2>

<ul>
  <li>Engineers running Cursor / Claude / other agents overnight</li>
  <li>Teams that want a required status check for secret/debris scans</li>
  <li>Anyone who has cleaned up an agent-authored commit they did not intend to ship</li>
</ul>

<h2 id="links">Links</h2>

<ul>
  <li>GitHub: <a href="https://github.com/harris-ahmad/deadpush">harris-ahmad/deadpush</a></li>
  <li>Install: <code class="language-plaintext highlighter-rouge">pip install deadpush</code> · <a href="https://pypi.org/project/deadpush/">PyPI</a></li>
  <li>Related tools: <a href="https://github.com/harris-ahmad/gitpull">gitpull</a>, <a href="https://github.com/harris-ahmad/chatliberate">ChatLiberate</a></li>
</ul>

<p>If you try it and hit a false positive worth teaching the guardian, open an issue or <a href="mailto:harrisah@buffalo.edu">email me</a>.</p>]]></content><author><name>Harris Ahmad</name><email>harrisah@buffalo.edu</email><uri>https://harrisahmad.dev</uri></author><category term="writing" /><category term="deadpush" /><category term="ai-agents" /><category term="developer-tools" /><category term="security" /><summary type="html"><![CDATA[AI coding agents can leak secrets, commit scratchpads, and pollute repos while you step away. deadpush is an always-on guardian with quarantine, hooks, and enforcement tiers.]]></summary></entry><entry><title type="html">The hidden mobile data cost of YouTube video ads</title><link href="https://harrisahmad.dev/writing/youtube-mobile-ad-data-costs/" rel="alternate" type="text/html" title="The hidden mobile data cost of YouTube video ads" /><published>2024-05-15T00:00:00-04:00</published><updated>2024-05-15T00:00:00-04:00</updated><id>https://harrisahmad.dev/writing/youtube-mobile-ad-data-costs</id><content type="html" xml:base="https://harrisahmad.dev/writing/youtube-mobile-ad-data-costs/"><![CDATA[<p>Mobile YouTube is free in price, but not always free in <strong>data</strong>. That matters most where prepaid mobile broadband is expensive relative to income.</p>

<p>In our ACM Web Conference 2024 (WWW ‘24) paper, we measured the <strong>hidden data cost of in-stream YouTube video ads</strong> from the user’s perspective — not advertiser CPM, and not platform revenue.</p>

<p><strong>Paper:</strong> <a href="https://doi.org/10.1145/3589334.3645496">Uncovering the Hidden Data Costs of Mobile YouTube Video Ads</a> (<a href="/files/ytafford-www24.pdf">PDF</a>, <a href="https://github.com/nsgLUMS/videoads-affordability-www24">code &amp; data</a>)</p>

<h2 id="what-we-measured">What we measured</h2>

<p>We built a crawl/stream pipeline and released a public corpus covering:</p>

<ul>
  <li><strong>17,600</strong> main videos</li>
  <li><strong>46,600+</strong> in-stream ad videos</li>
  <li>~<strong>8,225 hours</strong> of streamed content</li>
  <li><strong>8 countries</strong> (four developing, four developed)</li>
</ul>

<p>We then analyzed client <strong>buffer state</strong> around ad placement — which is where latent waste shows up.</p>

<h2 id="key-findings-short-version">Key findings (short version)</h2>

<ol>
  <li><strong>Skipping is not free.</strong> Users frequently still download <strong>80–100%</strong> of a skippable ad’s data after skipping (~31% of cases in developing regions, ~52.6% in developed regions in our data).</li>
  <li><strong>Mid-roll ads disrupt the main video buffer.</strong> A mid-roll can force re-download of as much as <strong>~71 seconds</strong> of main-video on average early in playback.</li>
  <li><strong>Affordability impact is real.</strong> Excess losses averaged about <strong>6.7% of a 2GB mobile plan</strong> in our affordability analysis.</li>
</ol>

<p>Put differently: ad playback policies interact with buffering in ways that charge users for bytes they never asked to consume.</p>

<h2 id="why-this-matters-for-builders">Why this matters for builders</h2>

<p>If you work on video players, ABR, ad insertion, or mobile products in emerging markets:</p>

<ul>
  <li>Treat <strong>skip</strong> as a hard stop on further ad media fetch when possible.</li>
  <li>Avoid policies that discard large main-video buffers on mid-roll insert.</li>
  <li>Measure <strong>user-paid bytes</strong>, not only completion rate or fill rate.</li>
  <li>Publish buffer/ad interaction metrics the way we publish latency SLOs.</li>
</ul>

<h2 id="what-we-released">What we released</h2>

<p>The dataset and toolchain are public so others can reproduce and extend the measurement:</p>

<ul>
  <li><a href="/files/ytafford-www24.pdf">Paper PDF</a></li>
  <li><a href="https://github.com/nsgLUMS/videoads-affordability-www24">Code &amp; data on GitHub</a></li>
  <li><a href="https://doi.org/10.1145/3589334.3645496">DOI</a></li>
</ul>

<h2 id="citation">Citation</h2>

<p>Emaan Atique, Saad Sher Alam, Harris Ahmad, Ihsan Ayyub Qazi, Zafar Ayyub Qazi. <em>Uncovering the Hidden Data Costs of Mobile YouTube Video Ads.</em> WWW ‘24.</p>

<p>If you’re studying video affordability, ABR/ad interaction, or mobile QoE in developing regions and want to compare notes, <a href="mailto:harrisah@buffalo.edu">email me</a>.</p>]]></content><author><name>Harris Ahmad</name><email>harrisah@buffalo.edu</email><uri>https://harrisahmad.dev</uri></author><category term="writing" /><category term="internet-measurement" /><category term="youtube" /><category term="affordability" /><category term="www24" /><summary type="html"><![CDATA[YouTube in-stream ads can waste mobile data even after you skip them. Summary of our ACM WWW '24 study of 17.6K videos and 46.6K ads across eight countries.]]></summary></entry></feed>