Best Practices for Engaging Industry Researchers
summary
External researchers in 2021 report a privacy flaw in a COVID exposure notification app that lets preinstalled apps read sensitive logs, and a 2023 USENIX paper measures devices logging PII (MACs, randomized MACs, SSIDs, phone numbers) across Wi‑Fi, Bluetooth and telephony. That reporting triggers an Android platform change that adds the peruse prompt to gate log access and an automation that detects PII and auto‑files bugs so owners must redact data. Industry response is slow, publicity can force action, and effective outreach uses VRP/bug reports, privacy faculty or academic reward channels.
AI-written summary · about
related talks
13mSafetypedia: Crowdsourcing Privacy Inspections
28mInterview with Martin Fowler, Tim Bray, Erik Doernenburg & Ola Bini
05mPrivacy Practices on Trial
23mLean Data as competitive advantage for business
49mSmall Changes, Big Impact: Securing Our World Through Public Education
39mEverybody's Changing, And I Don't Feel The Same
40mMeasuring the Ethical Behavior of Technology
05mProjects at