May 2015

Enhancing permissions through contextual integrity

By: Nithan Sannappa, Division of Privacy and Identity Protection | May 21, 2015 1:25PM

This is the third post in my series on privacy and security in mobile computing, which builds on the Commission’s 2013 mobile security workshop. In my last post, I concluded that – despite a history of usability concerns – permissions in mobile operating systems are clearly an improvement over the opacity of traditional operating systems.

Continue Reading Enhancing permissions through contextual integrity

Secure APIs and the principle of least privilege

By: Nithan Sannappa, Division of Privacy and Identity Protection | May 7, 2015 1:12PM

Editor’s Note: As noted in a previous post, Tech@FTC is expanding to include posts by other technically minded staff at the Commission. This is the first in a series of blog posts by Nithan Sannappa, an attorney in the Division of Privacy and Identity Protection, that will explore several important issues regarding user privacy and security in mobile computing.

Continue Reading Secure APIs and the principle of least privilege