April 16, 2014

avatar

Google Glass vuln in QR codes and ballot marking applications

Reading recently about a vulnerability in Google Glass that can be exploited if a victim takes a picture of a malicious QR code made me think about one of the current trends in absentee balloting. A number of localities in the US are trying out absentee ballot schemes where a voter goes to a website and makes his/her choices through a web form, then prints out a ballot that contains his/her choices as a marked ballot plus a barcode (typically a 2D QR code). The ballot is then mailed back to the locality with whatever signature forms are required. When the ballot arrives at the locality, election officials scan the QR code to duplicate the ballot showing the voter’s choices, (hopefully) compare that the voter selections actually match the marks, and then the ballot goes forward. (Commercial products with this feature include Everyone Counts and Scytl.)
[Read more...]

avatar

MIT asks to intervene in Swartz FOIA suit

Yesterday MIT filed papers asking to intervene in journalist Kevin Poulsen’s Freedom of Information Act (FOIA) lawsuit seeking the Secret Service’s records of the agency’s investigation of Aaron Swartz. Poulsen had won a court order requiring the Secret Service to turn over its documents about Aaron, who took his own life while facing aggressive criminal prosecution for accessing MIT’s network to download large numbers of academic papers. Now MIT is asking the court for the right to review the documents before they are turned over to Poulsen.

This doesn’t look good for MIT.
[Read more...]

avatar

Take Over My Dream Job: Associate Director at CITP

Nearly four years ago, I joined the Center for Information Technology Policy at Princeton as Associate Director. The CITP community is a fantastic collection of smart and funny people who work passionately on all aspects of information technology policy. It was my dream job, so it was bittersweet when I accepted a new job working on internet freedom programs at the State Department. However, this means that someone else has a chance to step into this incredible position. If you love tech policy and want to help lead a vibrant and growing research center, you can now apply to be the Associate Director of the Center for Information Technology Policy at Princeton. I am happy to answer any questions that you may have, at

In my new role at the State Department, I help to award and oversee grants to groups that are supporting internet freedom worldwide. This includes technology tools as well as advocacy, training, and research. I am always eager to hear from folks with projects or ideas, and part of my goal is to help support the growing internet freedom community however I can. Feel free to email me at , and to submit a Statement of Interest (SOI) for technology projects (the next quarterly round of SOI’s are due on August 30th).