jonathanmayer

6 ms·

1.
by jonathanmayer 4y ago
Context: I teach at Princeton and study social media and recommendation systems. From a very quick skim of the repositories, this appears to be quite limited transparency. The documentation gives a decent high-level overview of how Tweet re
2.
by jonathanmayer 4y ago
Context: I teach at Princeton and used to work at the FCC. Several comments suggest systematically comparing FCC data to what ISP websites say about availability. My research group did this! Here's the paper: https://dl.acm.
3.
by jonathanmayer 5y ago
I previously served as CTO of the FCC Enforcement Bureau. A couple thoughts on the regulatory dimensions of this report. * This could be a Federal Trade Commission problem. T-Mobile, like all major ISPs, has made public representations abou
4.
by jonathanmayer 5y ago
Hi, I previously served as CTO of the FCC's Enforcement Bureau, where I worked on then-Chairman Wheeler's Robocall Strike Force. I'd like to offer a few observations that might be of interest. * T-Mobile, like the other carri
5.
by jonathanmayer 5y ago
T-Mobile has had recurring data security deficiencies. I know because I served as CTO of the FCC's Enforcement Bureau, before returning to academia. In 2017, the FCC determined that T-Mobile had violated federal law in a data breach in
6.
by jonathanmayer 5y ago
(Context: I teach computer security at Princeton and have a paper at this week's Usenix Security Symposium describing and analyzing a protocol that is similar to Apple's: https://www.usenix.org/conference/usen
7.
Warnings That Work: Combating Misinformation Without Deplatforming(lawfareblog.com)
7 points by jonathanmayer 5y ago|0 comments
8.
by jonathanmayer 5y ago
> Have you thought about using central/global differential privacy (which tends to have much less noise) on the "high level aggregates" or "aggregated datasets" that persist after the research study ends? Yes. Ce
9.
by jonathanmayer 5y ago
Our team looked closely at the Google, Microsoft, and Apple local differential privacy implementations when building Rally. It helped that we have friends who worked on RAPPOR.
10.
by jonathanmayer 5y ago
I am not aware of any public announcement or explanation. Which is... probably intentional, since Google is removing a headline privacy feature from Chrome.
11.
by jonathanmayer 5y ago
> Would appropriately rigorous independent scholarship be considered as a trustworthy source within your sphere? Definitely. Academia doesn't have a monopoly on excellent technology and society research. The Markup's data-drive
12.
by jonathanmayer 5y ago
> 1. Do you expect the opt-in nature of these studies to impact their findings? The Rally participant population is not representative of the U.S. population—these are users who run Firefox (other browsers coming soon), choose to join Ra
13.
by jonathanmayer 5y ago
> with the only privacy guarantees being that the data is encrypted during transport, and a "promise" that they will run internal audits to make sure private data isn't released from their servers. There's much more t
14.
by jonathanmayer 5y ago
Common research methods have significant limitations. Web crawls, for instance, usually don't realistically simulate user activity and experiences. Lab studies often involve simplified systems that don't generalize to the real wor
15.
by jonathanmayer 5y ago
> This is a luxury many researchers that work outside of these big tech companies don't have, which creates a scientific power imbalance. The power imbalance goes far beyond science. Independent research is foundational for platform
16.
by jonathanmayer 5y ago
> Presumably, the users will be well-endowed and tax-advantaged institutions who could have just bought the information from data-aggregators anyway. Nope. This is an important point: the type of crowdsourced science that Rally enables i
17.
by jonathanmayer 5y ago
Princeton research collaborator here. Glad to answer questions about Rally. > What "data"? Browsing history? Identity? Something else? That depends on the Rally study, since research questions differ and studies are required to
18.
by jonathanmayer 8y ago
Princeton University Center for Information Technology Policy | Princeton, NJ | Full Time Princeton CITP is a leading research center at the intersection of technology and public policy. We've conducted groundbreaking work on consumer
19.
by jonathanmayer 8y ago
My experience was that the major carriers had little economic incentive to invest in improving telephone service, which they viewed as a legacy line of business. They were focused on selling data plans, building their networks, and entering
20.
by jonathanmayer 8y ago
I worked on countering phone scams and robocalls at the Federal Communications Commission for over a year. This operation was a big win and an impressive international collaboration. That said, the robocall problem is getting worse, not bet
21.
by jonathanmayer 11y ago
(Background: I'm a computer security lawyer at Stanford. This ain't legal advice.) This is a misunderstanding. The FCC has not tried to ban Wi-Fi device modding. What it might be requiring is locked-down radios. And only rad
22.
by jonathanmayer 11y ago
(Background: I'm a computer security researcher and lawyer at Stanford.) When a security researcher gets threatened, there's a tendency to lambast the lawyers. I think that's unfortunate. It is, very often, the client that de
23.
by jonathanmayer 12y ago
Background: I was quoted in the Wired piece. I made sure to emphasize that us outsiders can't say, with any certainty, whether this server was more or less secure than the State Department infrastructure. Matt Blaze, faculty at Penn, m
24.
How Verizon's Advertising Header Works(webpolicy.org)
146 points by jonathanmayer 12y ago|65 comments
25.
Is Instacart Deceptive?(webpolicy.org)
3 points by jonathanmayer 12y ago|1 comments
26.
Crowdsourced Phone Research: Three Hops May Net NSA Much of the U.S. Population(webpolicy.org)
2 points by jonathanmayer 13y ago|0 comments
27.
Stanford Security Lab is crowdsourcing a study of the NSA phone metadata program(cyberlaw.stanford.edu)
5 points by jonathanmayer 13y ago|0 comments
28.
The Web Is Flat - how international referrers leak domestic browsing to the NSA(webpolicy.org)
1 points by jonathanmayer 13y ago|0 comments
29.
Innovation or Exploitation? Get a geek perspective on CFAA. 2/19 at Stanford.(cyberlaw.stanford.edu)
1 points by jonathanmayer 14y ago|0 comments