Sherwin Siy

Apparently, it's National Consumer Protection Week.

It’s official: Sirius wins in the 2nd Circuit, court orders SDNY to dismiss Turtles’ claims with prejudice.

@tingerick @andy_lomeli Sorry—under the (admittedly fine) weather today.

For mobile health app developers, important tips on building privacy & security into apps. go.usa.gov/x9nsK #ChatSTC #PrivacyAware twitter.com/STOPTHNKCONNEC…

#PrivacyCon presentations and video archive will be on our website soon: ftc.gov/news-events/ev…

That’s “Mannan,” as in Mohammad Mannan of Concordia U. Not “Manna,” which is what the twitter autocorrect client apparently defaults to.

Manna’s abstract: #privacycon

Mannan: root cert and private keys often not uninstalled with software uninstall; certs stay good for average of 10 years. #privacycon

Manna: 13 of 14 studied Windows security products significantly downgraded TLS security. #privacycon

Mannan: other examples of client-end TLS intercept: Parental controls, av, ad insert. #privacycon

Mannan: tension between antivirus and https: #privacycon AV software wants to filter https traffic, so will interpose a TLS proxy in the mid

Mannan: Killed by Proxy: Analyzing client-end TLS Interception software: ftc.gov/system/files/d… #privacycon

McCoy: pay-per-install unwanted software is a massive commercial ecosystem #privacycon

McCoy: 59%of unwanted software flagged by at least one antivirus company #privacycon Some distributors better track records than others.

McCoy: Unwanted software can be "scareware" which scares the user into purchasing software for some nonexistent problem. #PrivacyCon

MCCoy: methodology involved downloading unwanted software— “they make it easy to do; it’s free…” #privacycon

McCoy: Pay-per-install = typically bundling unwanted software with other software. Typically deceptive promotions #privacycon

McCoy: On distribution method of “unwanted software”: pay-per-install. ftc.gov/system/files/d… #privacycon

Kharraz: ~70% of results indicated presence of ransomware that was not detected by other methods. #privacycon

Autocorrect is one of the least useful attributes of desktop Twitter. Weirdly, proper names exist. —Sherman Sit