Skip to content
View S-cpu3's full-sized avatar

Block or report S-cpu3

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
S-cpu3/README.md

πŸ›‘οΈ Aaron Thomas β€” Independent Security Researcher

6x Hacker Hall of Famer Β· Privacy Advocate Β· Tor Snowflake Operator

HackerOne Bugcrowd LinkedIn Bluesky

πŸš€ Visit the Website Β· πŸ“ Read the Blog Β· πŸ“¬ Get in Touch


πŸ‘‹ About

I'm a security researcher with a passion for cybersecurity and digital privacy. I care about helping people stay as safe as possible online and about responsibly disclosing vulnerabilities to the companies that build the tools we all rely on. I have taught cybersecurity awareness to 7 highschool classes, including 5 AP courses.

πŸ”’ πŸ† πŸ“° πŸ’Ό
30+ 6x 12 2+
Vulnerabilities disclosed Hacker Halls of Fame Articles published Years professional experience

Focus areas: Bug Bounties Β· Security Research Β· Privacy Β· JavaScript


πŸ† Hacker Hall of Fame & Acknowledgments

Responsibly disclosed vulnerabilities and been recognized publicly by:

Company Recognition
Apple Hacker Hall of Fame
Proton Hacker Hall of Fame
WindscribeVPN Hacker Hall of Fame
Signal Hacker Hall of Fame
U.S. Social Security Administration Hacker Hall of Fame
Brave Browser Hacker Hall of Fame
Ente Photos / Ente Auth / Ente Locker Thanked
Beli Thanked
Termius Thanked (2x)
Meta Thanked

πŸ› οΈ Projects

πŸ”’ SecureCycle

A privacy-first health app for storing sensitive information: conditions, medications, allergies, appointments, mental health notes, and reproductive health data. Everything is processed locally on your device and can be protected with an app PIN. No one, not even me, can access your data.

πŸ•΅οΈ StealthDetect

A stalkerware detection app for mobile devices. It uses a local VPN to inspect DNS queries and flag network-level indicators of compromise (IOCs), all on-device.

A website that lets you run a Tor Snowflake proxy right in your browser, helping people around the world reach a free and open internet, free from censorship and surveillance.


❄️ Tor Snowflake Impact

I run a Tor Snowflake proxy to help people bypass censorship and surveillance.

Period People Helped
2025 61,550 (β‰ˆ1.4 TB donated to the Tor network)
2026 (through October) 108,767 and counting
All Time Total 169,180 and counting

Live, per-month stats are on the website.


πŸ“š Recommended Reads by Me

Date Title
August 2026 Hey Meta, Stop Recording Me: Protecting Your Privacy Against Meta Glasses
July 2026 PeekList: How Brave's Playlist Bypassed FaceID Protection for Private Tabs
September 2025 Big Brother Babysitter: The Carceral Logic of Family Surveillance Apps
April 2025 The Abuser in Your Pocket: How Stalkerware Threatens Women’s Privacy - This paper was cited in a public comment letter to the FTC
July 2024 Empowering The Silenced: How Encryption Advances Women’s Rights

➑️ See all 12 articles on the website


🀝 Work With Me

Looking for a researcher for your program or have any questions? I'm open to private bug bounty invites and collaboration.

πŸ“§ aaront AT wearehackerone DOT com

Privacy is a fundamental human right and always will be

Pinned Loading

  1. SecureCycle SecureCycle Public

    SecureCycle is a privacy and security focused mobile app designed for tracking your health data privately.

    TypeScript 2