From the UMN response signed by the Computer Science & Engineering department head and associate department head: The study was focused on understanding a syst

From the UMN response signed by the Computer Science & Engineering department head and associate department head: The study was focused on understanding a system by identifying mechanisms through which security issues could be introduced in Linux software. Therefore, purely as a technical matter, this study did not qualify as “Human Subjects Research” and received no further scrutiny or oversight from the IRB. Importantly, even if one believed the study did involve human research subjects (perhaps due to the interactions and the incidental collection of email addresses), the study would clearly be exempt from IRB oversight pursuant to 45 CFR 46.104(D). In other words, the UMN IRB acted properly in this case. Full response: https://drive.google.com/file/d/1z3Nm2bfR4tH1nOGBpuOmLyoJVEiO9cUq/view https://drive.google.com/file/d/1z3Nm2bfR4tH1nOGBpuOmLyoJVEi...