Daniel Zappala
@zappala.bsky.social
human-centered security research at BYU
Reposted by Daniel Zappala
Started a thread in the other place and bringing it over here - I really think we should be more vocal about the opportunities that lay at the intersection of these two options!
So I'm starting a live thread of new roles as I become aware of them - feel free to add / extend / share :
So I'm starting a live thread of new roles as I become aware of them - feel free to add / extend / share :
Life situations are bleak right now for a lot of people. In tech, the "Venn Diagram" of (1) positive work and (2) making enough money to support your family is increasingly non-overlapping. We all do what we can.
This image has been living in my mind rent-free for months.
This image has been living in my mind rent-free for months.
October 29, 2025 at 2:25 AM
Started a thread in the other place and bringing it over here - I really think we should be more vocal about the opportunities that lay at the intersection of these two options!
So I'm starting a live thread of new roles as I become aware of them - feel free to add / extend / share :
So I'm starting a live thread of new roles as I become aware of them - feel free to add / extend / share :
Love to see this. I set up a recurring monthly donation to my food bank.
Donated in memory of my immigrant grandmothers and their foundational belief that food == love
I just donated to my local food bank. If you can, you should too. People are already suffering but next month, in particular, is going to be so difficult.
October 26, 2025 at 11:26 PM
Love to see this. I set up a recurring monthly donation to my food bank.
Coded with an LLM
(this works for both systems and qualitative researchers)
(this works for both systems and qualitative researchers)
In honor of spooky month, share a 4 word horror story that only someone in your profession would understand
I'll go first: Six page commercial lease.
I'll go first: Six page commercial lease.
October 13, 2025 at 3:58 AM
Coded with an LLM
(this works for both systems and qualitative researchers)
(this works for both systems and qualitative researchers)
Reposted by Daniel Zappala
It will be my second year co-chairing the Privacy and Security subcommittee at #CHI2026, with the awesome Florian Schaub and Emilee Rader. Abstract submission is today, and we are very excited to review the list of papers that you'll send our way...
Reminder🔉 Abstract/metadata deadline is today (Sep 4 AoE)! No new submissions and author changes after the deadline. Make sure metadata is finalized before time runs out!
September 4, 2025 at 6:59 AM
It will be my second year co-chairing the Privacy and Security subcommittee at #CHI2026, with the awesome Florian Schaub and Emilee Rader. Abstract submission is today, and we are very excited to review the list of papers that you'll send our way...
Reposted by Daniel Zappala
I have thoughts. Firstly, Bunch is absolutely right about this. I say this as someone who has worked for corporate media and small media. This is spot on:
August 11, 2025 at 3:23 PM
I have thoughts. Firstly, Bunch is absolutely right about this. I say this as someone who has worked for corporate media and small media. This is spot on:
Reposted by Daniel Zappala
Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at hdm.io/decks/MOORE%...
This deck includes some lightly-censored zero-day (more decks @ hdm.io)
This deck includes some lightly-censored zero-day (more decks @ hdm.io)
August 10, 2025 at 9:14 PM
Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at hdm.io/decks/MOORE%...
This deck includes some lightly-censored zero-day (more decks @ hdm.io)
This deck includes some lightly-censored zero-day (more decks @ hdm.io)
Reposted by Daniel Zappala
New paper out today, accepted at #FAccT2025, led by Jake Stein and me: "Not Even Nice Work If You Can Get It; A Longitudinal Study of Uber's Algorithmic Pay and Pricing" arxiv.org/abs/2506.15278
Over the last 3 years, we've been working with @workerinfox.bsky.social to audit Uber's algorithms. 1/
Over the last 3 years, we've been working with @workerinfox.bsky.social to audit Uber's algorithms. 1/
Not Even Nice Work If You Can Get It; A Longitudinal Study of Uber's Algorithmic Pay and Pricing
Ride-sharing platforms like Uber market themselves as enabling `flexibility' for their workforce, meaning that drivers are expected to anticipate when and where the algorithm will allocate them jobs, ...
arxiv.org
June 19, 2025 at 8:03 AM
New paper out today, accepted at #FAccT2025, led by Jake Stein and me: "Not Even Nice Work If You Can Get It; A Longitudinal Study of Uber's Algorithmic Pay and Pricing" arxiv.org/abs/2506.15278
Over the last 3 years, we've been working with @workerinfox.bsky.social to audit Uber's algorithms. 1/
Over the last 3 years, we've been working with @workerinfox.bsky.social to audit Uber's algorithms. 1/
Why is it a useful learning activity for a student to correct an AI system? Isn’t this more valuable for those training the AI than for the student? This seems to complicate learning more than to improve it.
"For example, a student could be asked to compare an AI-generated summary of an academic article with the original text, assessing what the AI engine gets right, what it gets wrong, and whether the article’s most important contributions have been recognized." (see next post)
August 7, 2025 at 8:28 PM
Why is it a useful learning activity for a student to correct an AI system? Isn’t this more valuable for those training the AI than for the student? This seems to complicate learning more than to improve it.
Reposted by Daniel Zappala
I don't have words for how infuriating this is data4democracy.substack.com/p/the-mother...
The Mothership Vortex: An Investigation Into the Firm at the Heart of the Democratic Spam Machine
How a single consulting firm extracted $282 million from a network of spam PACs while delivering just $11 million to actual campaigns.
data4democracy.substack.com
August 4, 2025 at 3:22 AM
I don't have words for how infuriating this is data4democracy.substack.com/p/the-mother...
Reposted by Daniel Zappala
Look at what happens to male teacher salaries (blue line) v.s. female teacher salaries (red line) after collective bargaining laws expire.
August 3, 2025 at 8:08 PM
Look at what happens to male teacher salaries (blue line) v.s. female teacher salaries (red line) after collective bargaining laws expire.
Reposted by Daniel Zappala
I'm in a phenomenal talk on gender inequality in cybersecurity this morrning and this is such a great cheat sheet for intersectional fair employment.
August 1, 2025 at 12:35 AM
I'm in a phenomenal talk on gender inequality in cybersecurity this morrning and this is such a great cheat sheet for intersectional fair employment.
Reposted by Daniel Zappala
Are you going to be at the best conference, SOUPS (@soupsconference.bsky.social)?
If so, consider signing up to be a mentor or mentee for the mentoring program! It's a great way to meet other folks at the conference :) www.usenix.org/conference/s...
If so, consider signing up to be a mentor or mentee for the mentoring program! It's a great way to meet other folks at the conference :) www.usenix.org/conference/s...
SOUPS 2025 Mentoring Program
The Twenty-First Symposium on Usable Privacy and Security (SOUPS 2025), August 10–12, 2025, Seattle, WA, USA.
www.usenix.org
July 22, 2025 at 3:31 PM
Are you going to be at the best conference, SOUPS (@soupsconference.bsky.social)?
If so, consider signing up to be a mentor or mentee for the mentoring program! It's a great way to meet other folks at the conference :) www.usenix.org/conference/s...
If so, consider signing up to be a mentor or mentee for the mentoring program! It's a great way to meet other folks at the conference :) www.usenix.org/conference/s...
Reposted by Daniel Zappala
@sauvik.me and I are co-chairing the SOUPS mentoring!
If you are attending SOUPS, consider signing up to be a mentor or a mentee. It's a wonderful way to connect with others.
www.usenix.org/conference/s...
If you are attending SOUPS, consider signing up to be a mentor or a mentee. It's a wonderful way to connect with others.
www.usenix.org/conference/s...
SOUPS 2025 Mentoring Program
The Twenty-First Symposium on Usable Privacy and Security (SOUPS 2025), August 10–12, 2025, Seattle, WA, USA.
www.usenix.org
July 22, 2025 at 4:29 PM
@sauvik.me and I are co-chairing the SOUPS mentoring!
If you are attending SOUPS, consider signing up to be a mentor or a mentee. It's a wonderful way to connect with others.
www.usenix.org/conference/s...
If you are attending SOUPS, consider signing up to be a mentor or a mentee. It's a wonderful way to connect with others.
www.usenix.org/conference/s...
Reposted by Daniel Zappala
Just sent this as an email to my department but figured I'd share more broadly in case it is useful. This describes the procedure happening now for science funding in Congress (@davidimiller.bsky.social can correct me if I got this wrong). Importantly, there are still actions that can be taken.
Science Funding Process
=====Written July 11 2025====== Hi all, Just wanted to share some information that is likely relevant to a lot of us, but not always easy to understand, about federal science budget procedure (feel f...
docs.google.com
July 11, 2025 at 3:23 PM
Just sent this as an email to my department but figured I'd share more broadly in case it is useful. This describes the procedure happening now for science funding in Congress (@davidimiller.bsky.social can correct me if I got this wrong). Importantly, there are still actions that can be taken.
It should not be this hard for a newspaper to admit its errors. Refusing to accept even the smallest amount of accountability is what we have in the authoritarian regime leading this country. We don’t need it in newspapers too.
Patrick Healy, NYT assistant managing editor for Standards and Trust, wrote a thread on how the Zohran Mamdani/Columbia story came together:
July 5, 2025 at 4:38 AM
It should not be this hard for a newspaper to admit its errors. Refusing to accept even the smallest amount of accountability is what we have in the authoritarian regime leading this country. We don’t need it in newspapers too.
This is a really good scam attempt. The only clue is a weird sender, and then the phone number is not the real one for Apple Support. But very convincing!
July 3, 2025 at 4:03 PM
This is a really good scam attempt. The only clue is a weird sender, and then the phone number is not the real one for Apple Support. But very convincing!
This is going to be fantastic. Join us in Seattle.
Excited to announce the Enigma Track program is now live for USENIX Security '25! Taking place August 13-14, this track delves into technology's societal impacts & future challenges: www.usenix.org/conference/u... 1/8
June 25, 2025 at 12:20 AM
This is going to be fantastic. Join us in Seattle.
Reposted by Daniel Zappala
Excited to announce the Enigma Track program is now live for USENIX Security '25! Taking place August 13-14, this track delves into technology's societal impacts & future challenges: www.usenix.org/conference/u... 1/8
June 25, 2025 at 12:15 AM
Excited to announce the Enigma Track program is now live for USENIX Security '25! Taking place August 13-14, this track delves into technology's societal impacts & future challenges: www.usenix.org/conference/u... 1/8
Reposted by Daniel Zappala
The greatest job alert! My team at EFF is hiring and you could be on it: www.paycomonline.net/v4/ats/web.p...
Policy and Research Staff Technologist
...
www.paycomonline.net
May 24, 2025 at 2:13 AM
The greatest job alert! My team at EFF is hiring and you could be on it: www.paycomonline.net/v4/ats/web.p...
Bookmark this. Great resource.
Hi, so I've spent the past almost-decade studying research uses of public social media data, like e.g. ML researchers using content from Twitter, Reddit, and Mastodon.
Anyway, buckle up this is about to be a VERY long thread with lots of thoughts and links to papers. 🧵
Anyway, buckle up this is about to be a VERY long thread with lots of thoughts and links to papers. 🧵
First dataset for the new @huggingface.bsky.social @bsky.app community organisation: one-million-bluesky-posts 🦋
📊 1M public posts from Bluesky's firehose API
🔍 Includes text, metadata, and language predictions
🔬 Perfect to experiment with using ML for Bluesky 🤗
huggingface.co/datasets/blu...
📊 1M public posts from Bluesky's firehose API
🔍 Includes text, metadata, and language predictions
🔬 Perfect to experiment with using ML for Bluesky 🤗
huggingface.co/datasets/blu...
May 21, 2025 at 6:32 PM
Bookmark this. Great resource.
Fantastic thread from Casey. Researchers, you need to think through these issues carefully before starting a project!
Another week, another research ethics controversy.
TL;DR Researchers released a public dataset of 2B+ messages from 4M+ users on 3k+ "public" Discord servers. Usernames/IDs are anonymized.
But let's unpack this one... 🧵
www.404media.co/researchers-...
TL;DR Researchers released a public dataset of 2B+ messages from 4M+ users on 3k+ "public" Discord servers. Usernames/IDs are anonymized.
But let's unpack this one... 🧵
www.404media.co/researchers-...
Researchers Scrape 2 Billion Discord Messages and Publish Them Online
A Brazilian team used Discord’s API to scrape 10% of its open servers.
www.404media.co
May 21, 2025 at 6:31 PM
Fantastic thread from Casey. Researchers, you need to think through these issues carefully before starting a project!
Reposted by Daniel Zappala
Thinking about devastating cuts to NSF: US gov-funded science has been the engine upon which most of the tech wealth was generated. But the oligarchs (currently hoarding much of that $) think it’s their own brilliance & not the accident of standing close to the scientific engine that made them rich.
May 4, 2025 at 5:47 PM
Thinking about devastating cuts to NSF: US gov-funded science has been the engine upon which most of the tech wealth was generated. But the oligarchs (currently hoarding much of that $) think it’s their own brilliance & not the accident of standing close to the scientific engine that made them rich.
Reposted by Daniel Zappala
"computer science is value neutral" is and always has been ridiculous generally, but it's especially and painfully ridiculous (to me) when the topic is cryptography. Philip Rogaway, as just one example, nailed this a decade ago:
May 3, 2025 at 2:52 PM
"computer science is value neutral" is and always has been ridiculous generally, but it's especially and painfully ridiculous (to me) when the topic is cryptography. Philip Rogaway, as just one example, nailed this a decade ago:
Reposted by Daniel Zappala
This is one of the worst violations of research ethics I've ever seen. Manipulating people in online communities using deception, without consent, is not "low risk" and, as evidenced by the discourse in this Reddit post, resulted in harm.
Great thread from Sarah, and I have additional thoughts. 🧵
Great thread from Sarah, and I have additional thoughts. 🧵
The mods of r/ChangeMyView shared the sub was the subject of a study to test the persuasiveness of LLMs & that they didn't consent. There’s a lot that went wrong, so here’s a 🧵 unpacking it, along with some ideas for how to do research with online communities ethically. tinyurl.com/59tpt988
From the changemyview community on Reddit
Explore this post and more from the changemyview community
tinyurl.com
April 26, 2025 at 10:25 PM
This is one of the worst violations of research ethics I've ever seen. Manipulating people in online communities using deception, without consent, is not "low risk" and, as evidenced by the discourse in this Reddit post, resulted in harm.
Great thread from Sarah, and I have additional thoughts. 🧵
Great thread from Sarah, and I have additional thoughts. 🧵