Viewing profile — jonathanmayer

Context: I teach at Princeton and study social media and recommendation systems. From a very quick skim of the repositories, this appears to be quite limited transparency. The docu…

Context: I teach at Princeton and used to work at the FCC. Several comments suggest systematically comparing FCC data to what ISP websites say about availability. My research group…

I previously served as CTO of the FCC Enforcement Bureau. A couple thoughts on the regulatory dimensions of this report. * This could be a Federal Trade Commission problem. T-Mobil…

Hi, I previously served as CTO of the FCC's Enforcement Bureau, where I worked on then-Chairman Wheeler's Robocall Strike Force. I'd like to offer a few observations that might be …

T-Mobile has had recurring data security deficiencies. I know because I served as CTO of the FCC's Enforcement Bureau, before returning to academia. In 2017, the FCC determined tha…

(Context: I teach computer security at Princeton and have a paper at this week's Usenix Security Symposium describing and analyzing a protocol that is similar to Apple's: https://w…

> Have you thought about using central/global differential privacy (which tends to have much less noise) on the "high level aggregates" or "aggregated datasets" that persist after …

Our team looked closely at the Google, Microsoft, and Apple local differential privacy implementations when building Rally. It helped that we have friends who worked on RAPPOR.

I am not aware of any public announcement or explanation. Which is... probably intentional, since Google is removing a headline privacy feature from Chrome.

> Would appropriately rigorous independent scholarship be considered as a trustworthy source within your sphere? Definitely. Academia doesn't have a monopoly on excellent technolog…

> 1. Do you expect the opt-in nature of these studies to impact their findings? The Rally participant population is not representative of the U.S. population—these are users who ru…

> with the only privacy guarantees being that the data is encrypted during transport, and a "promise" that they will run internal audits to make sure private data isn't released fr…

Common research methods have significant limitations. Web crawls, for instance, usually don't realistically simulate user activity and experiences. Lab studies often involve simpli…

> This is a luxury many researchers that work outside of these big tech companies don't have, which creates a scientific power imbalance. The power imbalance goes far beyond scienc…

> Presumably, the users will be well-endowed and tax-advantaged institutions who could have just bought the information from data-aggregators anyway. Nope. This is an important poi…

Princeton research collaborator here. Glad to answer questions about Rally. > What "data"? Browsing history? Identity? Something else? That depends on the Rally study, since resear…

Princeton University Center for Information Technology Policy | Princeton, NJ | Full Time Princeton CITP is a leading research center at the intersection of technology and public p…

My experience was that the major carriers had little economic incentive to invest in improving telephone service, which they viewed as a legacy line of business. They were focused …

I worked on countering phone scams and robocalls at the Federal Communications Commission for over a year. This operation was a big win and an impressive international collaboratio…