contact me email (at) (this domain) or tweet @irwinreyescom or bsky @irwinreyes.com
About me
I’m a security and privacy researcher at Two Six Technologies in Arlington, VA. My research interests include measuring the privacy risks of everyday consumer products and services, user perceptions of security issues, and mobile platform security. In my free time, I enjoy board games, biking, and annoying the neighbors with my ukulele and radio voice.
Papers
Security and Privacy Perceptions of Third-Party Application Access for Google Accounts
USENIX Security Symposium (USENIX), August 2022
(pdf)
Identifying and Classifying Third-party Entities in Natural Language Privacy Policies
Workshop on Privacy in Natural Language Processing (PrivateNLP), November 2020
(pdf)
The Price is (Not) Right: Comparing Privacy in Free and Paid Apps
Privacy Enhancing Technologies Symposium (PETS), July 2020
(pdf)
Disaster Privacy / Privacy Disaster
Journal of the Association for Information Science and Technology (JASIST), March 2020
Can You Pay for Privacy? Consumer Expectations and the Behavior of Free and Paid Apps
Berkeley Technology Law Journal (BTLJ), 2020
(pdf)
Disaster Privacy / Privacy Disaster
Research Conference on Communications, Information and Internet Policy (TPRC), September 2019
(pdf)
Do You Get What You Pay For? Comparing the Privacy Behaviors of Free vs. Paid Apps
Workshop on Technology and Consumer Protection (ConPro), May 2019
(pdf)
On the Ridiculousness of Notice and Consent: Contradictions in App Privacy Policies
Workshop on Technology and Consumer Protection (ConPro), May 2019
(pdf)
"Won't Somebody Think of the Children?" Examining COPPA Compliance at Scale
Privacy Enhancing Technologies Symposium (PETS, 2020 Caspar Bowden award winner), July 2018
(pdf)
(slides)
Contextualizing Privacy Decisions for Better Prediction (and Protection)
ACM Conference on Human Factors (CHI), April 2018
(pdf)
Turtle Guard: Helping Android Users Apply Contextual Privacy Preferences
Symposium on Usable Privacy and Security (SOUPS), July 2017
(pdf)
"Is Our Children's Apps Learning?" Automatically Detecting COPPA Violations
Workshop on Technology and Consumer Protection (ConPro), May 2017
(pdf)
(slides)
Mobile Device Security: Hopes and Fears
International Conference on Passwords, December 2016
(pdf)
Adaptive Multi-Scale Optimization: Concept and Case Study on Simulated UAV Surveillance Operations
IEEE Systems Journal, November 2015
(pdf)
A Probability-Of-Error-Constrained Sequential Decision Algorithm for Data-Rich Automatic Target Recognition
SPIE Automatic Target Recognition Conference, April 2010
(pdf)
Presentations
Care and Feeding of a DARPA Project
University of Wisconsin, La Crosse Software Engineering Management guest lecture, February 2024
(slides)
API Privacy: A Look at G Suite Marketplace Permissions and Policies
Workshop on Consumer Protection and Technology (ConPro) talk, May 2020
(slides) (pdf) (blog) (data 1 2)
Privacy and Power: What Your Apps Say About You
NBC Nightly News, December 2019
(mp4)
Android as a Research Platform
George Washington University Usable Security and Privacy guest lecture, October 2019
(slides)
Examining Privacy Violations in Children’s Apps
Workshop on the Protection of Children in a Connected World, October 2018
(slides)
“Won’t Somebody Think of the Children?” Examining COPPA Compliance at Scale
Privacy Enhancing Technologies Symposium, July 2018
A Platform for Mobile Contextual Privacy
Data Transparency Lab Conference, November 2016
Other Projects
Privacy Enhancements for Android (PE for Android)
Blog post, May 2020
AppCensus: Learn the Privacy Costs of Free Apps
Website, July 2017
when.vote
Website, February 2017
Monkey Business in Children’s Apps
Blog post, January 2017
Krazy Kitchen
Website, January 2012
Experience
Two Six Technologies
Principal Research Engineer
July 2019 - Present
International Computer Science Institute
Research Scientist
May 2016 - June 2019
Dell, Inc.
Research Software Engineer
October 2014 - January 2016
Johns Hopkins University Applied Physics Laboratory
Associate Software Engineer II
September 2011 - October 2014
Service
Symposium on Usable Security and Privacy (SOUPS)
Program committee 2020, 2021, 2023, 2024
USENIX Security Symposium (USENIX)
Program committee 2023
Artifact evaluation committee 2022
ACM CHI Conference on Human Factors in Computing Systems (CHI)
Reviewer 2021
ACM Transactions on Privacy and Security (TOPS)
Reviewer 2020
Privacy Enhancing Technologies Symposium (PETS)
External reviewer 2019
Education
University of Virginia
Master of Science, Systems Engineering
August 2009 - July 2011
Bachelor of Science, Computer Engineering
August 2005 - May 2009