Hi, I'm Maud.

I'm a Developer Relations Engineer at Google working on Chrome.

Today, I focus on 🔐 web security, privacy, authentication and 🔮 AI.

^{How it all started! Qt/OpenGL with C++.}

I started coding with C++ in 2013 and was quickly drawn to the web. Since 2015, I've built many web products using JavaScript, TypeScript, React, and React Native. I also had a fun stint as a UX/UI designer.

I then moved onto Developer Relations Engineering. I love being a bridge between developers and product/eng teams. I build developer tools, write demos and docs, run developer research, design dev tooling solutions, and channel feedback to product teams. I also speak at conferences.

In the physical world, I live in Paris. You can find me roaming around taking street pictures. Online, find me on BlueSky and LinkedIn (previously on X).

⭐ Open-source demos

• Security/Privacy/Authentication:
  • Autofill observer: Code • Live demo
  • Reporting API
  • ROR (Passkey reuse across sites)
  • 2FA with WebAuthn and a secuity key
• AI:
  • Toxicity warning with client-side AI: Code • Live demo
  • Product review autorating with client-side AI: Code • Live demo
  • Product review suggestions: Code • Live demo
  • Performance tups for client-side AI: Code • Live demo

👩🏻‍💻 Developer tooling

• strict-csp-html-webpack-plugin: A webpack plugin that configures a strict, hash-based CSP for a single-page application. It uses the strict-csp library to form a CSP and hooks into the popular HtmlWebpackPlugin to set up this CSP as a meta HTML tag. Source code • npm entry
• noise-lab: A tool to onboard and experiment with summary reports and noise in Privacy Sandbox Measurement APIs. Source code • Docs

🔎 Other DevX work

• I advocate / file bugs for DevX improvement in Chrome DevTools and Chrome browser.
• I bridged external devs with internal teams to land DevX improvements, like for example here.
• I research what web developers think about AI.
• I drive technical outreach with all early testers of a privacy-preserving web API for ad conversion measurement.

🎙️ Talks

Talk	Where & When
No buzz, just build: client-side AI	🕸️ Google I/O online · 2024
Passkeys, for a passwordless future	🇫🇷 DotJS Paris · 2024
Passkeys 101	🇩🇪 MunichJS · 2023
Passkeys workshop	🇺🇸 Authenticate San Diego · 2023
XSS protections with strict CSP	🇯🇵 Chrome Tech Nights Tokyo · 2023
Passkeys, autofill, 3P cookies: the Web in 2023	🇩🇪 Berlin GDE Summit · 2023
The hitchhiker's guide to web privacy	🇳🇱🇫🇷 Fronteers Utrecht + DevFest Nantes · 2022
HAUNTED: Chrome's vision for post-Spectre web development	🕸️ SnykCon online · 2021
Introducing the privacy budget	🕸️ Chrome Developers Summmit online · 2020
Prepare for a more private web	🕸️ Google I/O online · 2021

^{One of my favorite talks ❤️ Web security, Tokyo. I love small, engaged audiences I can directly interact with.}

^{DotJS stage, 1000+ live attendees. 2024, Paris.}

✏️ Articles and docs (selection)

• Security/Privacy/Authentication:
  • Measure browser autofill on your forms
  • Seamless credential sharing
  • Full guide on server-side passkey implementation: Part 1, Part 2, Part 3, Social media post
  • Passkey reuse across sites
  • HTTPS for local development: When and How
  • Referrer and Referrer-Policy best practices
  • Reporting API
  • Chrome's move to one-time permissions
  • Security headers quick reference
  • Debugging guide for Attribution Reporting
  • Attribution Reporting series
  • Secure your site with two-factor authentication with a security key (WebAuthn)
  • [Video series] Tutorial: Noise Lab
• AI:
  • 2-part developer guide on client-side toxicity detection: Part 1, Part 2, Social media post
  • Understand LLM sizes
  • Practical prompt engineering for smaller LLMs
  • Improve performance and UX for client-side AI

💙 Community

I drive and advocate for hosting tech events for underrepresented groups:

• Women Techmakers Paris meetup
• Ladies of Code Paris meetup

🤝 Misc OSS contributions

• I added one-time permission implementation to the Chrome permissions public demo
• I contributed dev guidance to passkeys.dev
• I improved onboarding docs for a Gen AI prototyping tool
• I reviewed the Privacy chapter of the Web Almanac 2021
• I coordinated a full course on web privacy
• I filed a common issue on Transformers.js

🥤 Fun

• artplz: Art in your terminal! It's dynamic, and should work with any painter you enter as a CLI argument. Under the hood, there's a Wikipedia scraper.
• cssunrise: A 1-minute sunrise in CSS.
• Hello worlds: Planets and exoplanets in 3D.

^{My artplz project}