Comment Disillusioned with EFF (Score 3, Interesting) 6
I had some interactions with EFF a few years ago that left me sad. They definitely do a lot of good work, but I had thought they would be pretty good at understanding complex technical issues and their nuanced interaction with social and political issues, but my experience was quite the opposite. They're a pretty blunt hammer, mostly focused on rejecting any technological change regardless of its benefits. Even that would be okay if they were at least able to articulate sound objections, but that also didn't seem to be the case.
I was working on Android and participating in the ISO 18013-5 mobile driving license standardization process. I thought it would be a good idea to consult with ACLU and EFF, partly to get their buy-in, but mostly to get their feedback. I thought they might have concerns that I could help to address either in the standard (though, honestly, the European members of the ISO committee were already going above and beyond with privacy protection and abuse protection -- the Germans in particular are incredibly paranoid about such things -- and that's good!) or in the Android infrastructure I was building.
ACLU was great, at least for a while. The reason it was great was because the ACLU representative I was working with was Jon Callas (former. CTO of Silent Circle and PGP Corp, Chief Scientist of PGP Inc.). Jon is brilliant, with a deep and abiding interest in privacy. He was generally impressed with the approach we were taking, and had some good insights for tweaks we could make to tighten it up. Unfortunately Jon only worked with the ACLU for a couple of years, and we struggled to find anyone to engage at all after his departure. I'm not sure he wants to share publicly his reasons for separating, so I won't go into that (though I will point out Jon's article, linked above, is not an official ACLU position).
EFF... not so much. The EFF folks seemed not even to be able to understand what we were building. They kept comparing it to e-Verify (which they think is unambiguously bad) but were unable to articulate precisely what the problems with e-Verify were, or how those might translate to mDLs. I was actively seeking feedback on concerns that I could try to mitigate through good design and implementation. Their response was just a blanket "no, this is all bad" with no thought behind it, and no consideration for the individual privacy improvements that electronic delivery with selective disclosure provide as compared to plastic cards that just lay all of your personal information out there.
My discussions with police were actually far more productive than my discussions with EFF. The cops recommended pro-privacy tweaks that I incorporated -- their concern wasn't actually privacy, mind you, but liability, both financial and legal. The chiefs I spoke with were very concerned that there not be any circumstance in which a police officer might need to touch your phone, because they didn't want to deal with the crap that would ensue when phones were broken, or illegally searched. They were significantly more tech savvy than you might expect, too, and of course they deeply understood highway stops and other police interactions.
But EFF was just frustrating and useless. Which is too bad because I had always had a lot of respect for them and the work they do. I still do, I guess... I just understand now that they have morphed into a typical lawyer-based civil rights organization. Which is good! We absolutely need those! But they lack the technical sophistication I understand they had when founded.