Aleksander Essex Profile picture
May 19, 2020 4 tweets 2 min read Read on X
"The number of (technical) briefings computer science subject matter experts submit to a Canadian Parliamentary committee is normally zero" via @papervote papervotecanada2.wordpress.com/2020/05/18/set…
There are a few reasons for this. Unsurprisingly, technology people are more interested in tech than politics, and many wouldn't see the point of trying to reach across the divide. But in my experience, that street runs both ways.
For example, despite being the only technical submission to #PROC, despite our offer to appear, and despite them ultimately recommending to adopt the very technology we were offering guidance on, we were not among the dozens of witnesses they invited to hear from
By contrast, one of the witnesses they invited was essentially presenting a rebuttal to our brief. Honestly, I just don't know what to make of that.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Aleksander Essex

Aleksander Essex Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @aleksessex

Oct 18, 2021
Setting aside the dubious normalization of ubiquitous ID checking, vaccine passports create new opportunities for inescapable data collection 🧵
Proponents of vaccine passports rightly point out that showing ID was something we previously had to do, like when buying alcohol or entering a bar
However, in those settings, a human looks at your ID. They don't record it. The interaction is ephemeral. They make a decision in the moment, then it's gone
Read 11 tweets
Sep 30, 2020
I don't use remote online proctoring services in my courses. As a cybersecurity professor, I couldn't in good conscience make my students download and install something on their device that I wouldn't install myself. lfpress.com/news/local-new…
I couldn't in good conscience require my students to submit to facial recognition software when I wouldn't myself. Or grant such an app system-level privileges.
I hear the term "we're confident" thrown around altogether too much in the context of someone else's data and someone else's device. What I never hear is the indemnification. I never hear the pledge. Don't tell us how you're confident. Tell us how you're liable.
Read 5 tweets
Sep 18, 2020
This is what a ballot looks like when you prioritize the needs of voters above the needs of optical-scan equipment
Compare: tiny ovals, excessive white space, implicit oval/candidate associations Image
Here's a thread debating whether this mark would be counted by a machine, which, you'll notice, is a very different question than "should this mark be counted?"
Read 5 tweets
Sep 14, 2020
1/5 Online voting vendor @Voatz has been engaged in an alarming campaign in essence to become the gatekeepers of their own cyber accountability. Today I join 70 security experts in a letter admonishing their recent submission to the @USSupremeCourt disclose.io/voatz-response…
2/5 Our response has an unusually diverse list of signatories from academia, industry, and government. It includes those who work in software security in general, as well as those who work in elections in particular, making the case that @Voatz's views are not widely held
3/5 In their amicus brief, @Voatz referenced their work with @Hacker0x01 as evidence of the "success" of their bug bounty program. Notable among the signatories of this letter, therefore, is @Hacker0x01 and a number of other bug bounty organizations
Read 15 tweets
Sep 3, 2020
Remember when online voting vendor @Voatz referred a @UMich student to the authorities? Well now they're arguing to the @USSupremeCourt that the Computer Fraud and Abuse Act should not be narrowed to protect independent "unauthorized" security research supremecourt.gov/DocketPDF/19/1…
At issue is the question of whether independent cybersecurity research is necessary. @Voatz argues research and testing "can be performed by authorized parties" and that "unauthorized research" and dissemination of "theoretical security vulnerabilities" is "harmful".
.@Voatz describes bug bounties as "highly effective" and even references their past association with @Hacker0x01 while brazenly omitting that they were removed from the program for not "acting in good faith towards the security researcher community." cointelegraph.com/news/voatz-bug…
Read 12 tweets
Jul 25, 2020
So @nicolejgoodman and I testified to @HoCCommittees #PROC that remote voting was doable for NON-SECRET votes. The report completely omits this crucial point and instead inexplicably recommends "conducting votes via SECRET ballots electronically"
We detailed in an @IRPP oped why NON-SECRET voting was necessary for verifiability. We submitted this breif to the committee and summarized it in our testimony. Incredibly, these arguments were all omitted from the report and our brief wasn't even cited.
policyoptions.irpp.org/magazines/marc…
By selectively excluding key portions of expert testimony from the report that would have run contrary to the committee's eventual recommendation, I find myself sharing @CPC_HQ's assessment that the government "seemed committed to a specific outcome."
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(