contact me email (at) (this domain) or tweet @irwinreyescom

About me

I’m a security and privacy researcher at Two Six Labs in Arlington, VA. In a previous life, I was at the International Computer Science Institute (ICSI) at UC Berkeley. My research interests include measuring the privacy risks of everyday consumer products, user perceptions of security issues, and the online advertising ecosystem. In my free time, I enjoy board games, hiking, and annoying the neighbors with my ukulele and radio voice.

Papers

The Price is (Not) Right: Comparing Privacy in Free and Paid Apps
Privacy Enhancing Technologies Symposium (PETS), July 2020
(pdf)

Disaster Privacy / Privacy Disaster
Journal of the Association for Information Science and Technology (JASIST), March 2020

Can You Pay for Privacy? Consumer Expectations and the Behavior of Free and Paid Apps
Berkeley Technology Law Journal (BTLJ), 2020
(pdf)

Disaster Privacy / Privacy Disaster
Research Conference on Communications, Information and Internet Policy (TPRC), September 2019
(pdf)

Do You Get What You Pay For? Comparing the Privacy Behaviors of Free vs. Paid Apps
Workshop on Technology and Consumer Protection (ConPro), May 2019
(pdf)

On the Ridiculousness of Notice and Consent: Contradictions in App Privacy Policies
Workshop on Technology and Consumer Protection (ConPro), May 2019
(pdf)

"Won't Somebody Think of the Children?" Examining COPPA Compliance at Scale
Privacy Enhancing Technologies Symposium (PETS), July 2018
(pdf) (slides)

Contextualizing Privacy Decisions for Better Prediction (and Protection)
ACM Conference on Human Factors (CHI), April 2018
(pdf)

Turtle Guard: Helping Android Users Apply Contextual Privacy Preferences
Symposium on Usable Privacy and Security (SOUPS), July 2017
(pdf)

"Is Our Children's Apps Learning?" Automatically Detecting COPPA Violations
Workshop on Technology and Consumer Protection (ConPro), May 2017
(pdf) (slides)

Mobile Device Security: Hopes and Fears
International Conference on Passwords, December 2016
(pdf)

Adaptive Multi-Scale Optimization: Concept and Case Study on Simulated UAV Surveillance Operations
IEEE Systems Journal, November 2015
(pdf)

A Probability-Of-Error-Constrained Sequential Decision Algorithm for Data-Rich Automatic Target Recognition
SPIE Automatic Target Recognition Conference, April 2010
(pdf)

Presentations

API Privacy: A Look at G Suite Marketplace Permissions and Policies
Workshop on Consumer Protection and Technology (ConPro) talk, May 2020
(slides) (pdf) (blog) (data 1 2)

Privacy and Power: What Your Apps Say About You
NBC Nightly News, December 2019
(mp4)

Android as a Research Platform
George Washington University Usable Security and Privacy guest lecture, October 2019
(slides)

Examining Privacy Violations in Children’s Apps
Workshop on the Protection of Children in a Connected World, October 2018
(slides)

“Won’t Somebody Think of the Children?” Examining COPPA Compliance at Scale
Privacy Enhancing Technologies Symposium, July 2018

A Platform for Mobile Contextual Privacy
Data Transparency Lab Conference, November 2016

Other Projects

Privacy Enhancements for Android (PE for Android)
Blog post, May 2020

AppCensus: Learn the Privacy Costs of Free Apps
Website, July 2017

when.vote
Website, February 2017

Monkey Business in Children’s Apps
Blog post, January 2017

Krazy Kitchen
Website, January 2012

Experience

Two Six Labs

Lead Research Engineer
July 2019 - Present
Explored and assessed privacy-enhacing technologies for mobile platforms.

International Computer Science Institute

Research Scientist
May 2016 - June 2019
Investigated context-aware permission systems in smartphones and data collection practices in apps marketed to children.

Dell, Inc.

Research Software Engineer
October 2014 - January 2016
Prototyped gesture-based continuous authentication systems for mobile devices.

Johns Hopkins University Applied Physics Laboratory

Software Engineer
September 2011 - October 2014
Developed and evaluated high-fidelity simulations in support of the Aegis Ballistic Missile Defense System.

Service

Program Committee
Symposium on Usable Privacy and Security (SOUPS 2020)

Reviewer
ACM Transactions on Privacy and Security (TOPS 2020)

External Reviewer
Privacy Enhancing Technologies Symposium (PETS 2019)

Education

University of Virginia

Master of Science, Systems Engineering
August 2009 - July 2011

Bachelor of Science, Computer Engineering
August 2005 - May 2009