Vulnerability reporting is dysfunctional
In January, we released a study showing the ease of SIM swaps at five U.S. prepaid carriers. These attacks—in which an adversary tricks telecoms into moving th…
Cybersecurity
The battle against disinformation is global
Disinformation-spewing online bots and trolls from halfway around the world are continuing to shape local and national debates by spreading lies online on a mas…
Governing New Frontiers in the Information Age
Many pressing environmental and security threats now facing the international community may be traced to the frontiers. From climate change and cyber-attacks to…
Press
•
The Cybersecurity 202: Lawmakers, technologists fight over encryption in child exploitation bill
“Basically, I see this as a cowardly measure to maintain plausible deniability that this is not about encryption,” Riana Pfefferkorn, associate director of surv…
Press
•
Hennepin sheriff investigator's warrant to access encrypted Facebook messages worries digital privacy advocates
"But, Riana Pfefferkorn said that the warrant highlighted the lengths to which law enforcement officers are willing to go pursue a suspect, likening it to…
Blog
•
The EARN IT Act Is Unconstitutional: Fourth Amendment
So far, I’ve covered what I believe to be some First Amendment and due process problems with the EARN IT Act bill. Last but not least, let’s talk about the Four…
Press
•
Is the EARN-IT Act a backdoor attempt to get encryption backdoors?
""It's clear that the bill drafters know they have a huge Fourth Amendment problem if they directly mandate the measures they want tech companies…
Press
•
We Built a Database of Over 500 iPhones Cops Have Tried to Unlock
""That there are a number of variables involved here does not sound unique to the context of encrypted devices. Law enforcement does not operate in a…
USENIX Enigma 2020 - Encrypted Messaging (Panel)
Encrypted Messaging (Panel) Moderator: Jon Callas, Senior Technology Fellow, ACLU Panelists: Riana Pfefferkorn, Associate Director of Surveillance and Cybers…
Blog
•
The EARN IT Act Is Unconstitutional: Due Process
I’ve previously covered the First Amendment concerns that I have with the newly-introduced EARN IT Act bill. I also have due-process concerns about the bill’s “…
Blog
•
The EARN IT Act Is Unconstitutional. First Up, the First Amendment.
The disastrous EARN IT Act bill is coming up for a hearing Wednesday morning in the Senate Judiciary Committee, where it’s been introduced as Senate bill S. 339…
Press
•
Take These 4 Steps to Protect Yourself After a Data Breach
"“Think about it as basic cyber hygiene,” says Scott Shackelford, cybersecurity expert and Executive Director of the Ostrom Workshop at the University of I…