contact me email (at) (this domain) or tweet @irwinreyescom or bsky @ioreyes.bsky.social

About me

I’m a security and privacy researcher at Two Six Technologies in Arlington, VA. My research interests include measuring the privacy risks of everyday consumer products and services, user perceptions of security issues, and mobile platform security. In my free time, I enjoy board games, biking, and annoying the neighbors with my ukulele and radio voice.

Papers

Security and Privacy Perceptions of Third-Party Application Access for Google Accounts
USENIX Security Symposium (USENIX), August 2022
(pdf)

Identifying and Classifying Third-party Entities in Natural Language Privacy Policies
Workshop on Privacy in Natural Language Processing (PrivateNLP), November 2020
(pdf)

The Price is (Not) Right: Comparing Privacy in Free and Paid Apps
Privacy Enhancing Technologies Symposium (PETS), July 2020
(pdf)

Disaster Privacy / Privacy Disaster
Journal of the Association for Information Science and Technology (JASIST), March 2020

Can You Pay for Privacy? Consumer Expectations and the Behavior of Free and Paid Apps
Berkeley Technology Law Journal (BTLJ), 2020
(pdf)

Disaster Privacy / Privacy Disaster
Research Conference on Communications, Information and Internet Policy (TPRC), September 2019
(pdf)

Do You Get What You Pay For? Comparing the Privacy Behaviors of Free vs. Paid Apps
Workshop on Technology and Consumer Protection (ConPro), May 2019
(pdf)

On the Ridiculousness of Notice and Consent: Contradictions in App Privacy Policies
Workshop on Technology and Consumer Protection (ConPro), May 2019
(pdf)

"Won't Somebody Think of the Children?" Examining COPPA Compliance at Scale
Privacy Enhancing Technologies Symposium (PETS, 2020 Caspar Bowden award winner), July 2018
(pdf) (slides)

Contextualizing Privacy Decisions for Better Prediction (and Protection)
ACM Conference on Human Factors (CHI), April 2018
(pdf)

Turtle Guard: Helping Android Users Apply Contextual Privacy Preferences
Symposium on Usable Privacy and Security (SOUPS), July 2017
(pdf)

"Is Our Children's Apps Learning?" Automatically Detecting COPPA Violations
Workshop on Technology and Consumer Protection (ConPro), May 2017
(pdf) (slides)

Mobile Device Security: Hopes and Fears
International Conference on Passwords, December 2016
(pdf)

Adaptive Multi-Scale Optimization: Concept and Case Study on Simulated UAV Surveillance Operations
IEEE Systems Journal, November 2015
(pdf)

A Probability-Of-Error-Constrained Sequential Decision Algorithm for Data-Rich Automatic Target Recognition
SPIE Automatic Target Recognition Conference, April 2010
(pdf)

Presentations

Care and Feeding of a DARPA Project
University of Wisconsin, La Crosse Software Engineering Management guest lecture, February 2024 (slides)

API Privacy: A Look at G Suite Marketplace Permissions and Policies
Workshop on Consumer Protection and Technology (ConPro) talk, May 2020
(slides) (pdf) (blog) (data 1 2)

Privacy and Power: What Your Apps Say About You
NBC Nightly News, December 2019
(mp4)

Android as a Research Platform
George Washington University Usable Security and Privacy guest lecture, October 2019
(slides)

Examining Privacy Violations in Children’s Apps
Workshop on the Protection of Children in a Connected World, October 2018
(slides)

“Won’t Somebody Think of the Children?” Examining COPPA Compliance at Scale
Privacy Enhancing Technologies Symposium, July 2018

A Platform for Mobile Contextual Privacy
Data Transparency Lab Conference, November 2016

Other Projects

Privacy Enhancements for Android (PE for Android)
Blog post, May 2020

AppCensus: Learn the Privacy Costs of Free Apps
Website, July 2017

when.vote
Website, February 2017

Monkey Business in Children’s Apps
Blog post, January 2017

Krazy Kitchen
Website, January 2012

Experience

Two Six Technologies

Principal Research Engineer
July 2019 - Present

International Computer Science Institute

Research Scientist
May 2016 - June 2019

Dell, Inc.

Research Software Engineer
October 2014 - January 2016

Johns Hopkins University Applied Physics Laboratory

Associate Software Engineer II
September 2011 - October 2014

Service

Symposium on Usable Security and Privacy (SOUPS)
Program committee 2020, 2021, 2023, 2024

USENIX Security Symposium (USENIX)
Program committee 2023
Artifact evaluation committee 2022

ACM CHI Conference on Human Factors in Computing Systems (CHI)
Reviewer 2021

ACM Transactions on Privacy and Security (TOPS)
Reviewer 2020

Privacy Enhancing Technologies Symposium (PETS)
External reviewer 2019

Education

University of Virginia

Master of Science, Systems Engineering
August 2009 - July 2011

Bachelor of Science, Computer Engineering
August 2005 - May 2009