Q&A with the ACLU's Jon Callas, formerly of Apple, on the need for tech expertise in policymaking, the biggest challenges for the security industry, and more
Apple security expert Jon Callas, who helped build protection for billions of computers and smartphones against criminal hackers … Tweets: @kimzetter , @lorenzofb , and @kimzetter Tweets: Kim Zetter / @kimzetter : “The identification issue is the hardest problem that we have in security,” says Apple security and encryption expert @joncallas. “If I get a text message from an unknown number saying hi this is Kim, how do I evaluate that?” http://motherboard.vice.com/ ... Lorenzo Franceschi-Bicchierai / @lorenzofb : New: @KimZetter interviews @joncallas, who just left Apple to join the ACLU. Great insights into surveillance, the dangers of backdoors, and why PGP didn't become as widespread as more recent encryption protocols. http://motherboard.vice.com/ ... Kim Zetter / @kimzetter : He also talks about how even he, an encryption expert, has trouble signing PGP keys and verifying those damn Signal safety numbers - “I will admit I do not really know how to evaluate somebody's safety number” http://twitter.com/...
Context & Ripple Effects
Jon Callas built his career inside the products he now critiques: co-founder of PGP Corp and Silent Circle, creator of Blackphone, then a senior security role at Apple before leaving to join the ACLU in late 2018. This Kim Zetter interview is his first extended public statement from inside a civil-liberties organization rather than a vendor.
The timing matters: the interview lands while the device-encryption fight is still live, two years after Apple's refusal to build a backdoor for the FBI over the San Bernardino shooter's iPhone and months after Wired profiled Ray Ozzie's attempt to design a backdoor that wouldn't break everything else. Callas is arguing, from experience, that the people drafting policy on these questions mostly lack the technical grounding to evaluate them.
First-order effects
- The ACLU gains an in-house technologist who can vet surveillance and encryption proposals with the credibility of someone who shipped protection for billions of devices — directly strengthening its position against backdoor mandates like the one Apple refused in 2016.
Second-order effects
- Civil-liberties organizations become a destination for senior security talent, not just critics of it: Callas's own later move to the EFF as Technology Projects Director shows the pipeline institutionalizing across advocacy groups, giving them standing to counter industry-side arguments like Ozzie's engineered-backdoor proposal.
Third-order effects
- If practitioners keep crossing into policy roles, encryption debates shift from 'experts versus government' toward experts embedded on both sides — raising the baseline of technical literacy in surveillance policymaking while leaving the core unsolved problem Callas names, identity verification ('if I get a text from an unknown number saying hi this is Kim, how do I evaluate that?'), still unaddressed by either camp.
The trend: Veteran cryptographers are migrating from building security products into policy-facing roles at civil-liberties institutions, as the encryption and surveillance fight moves from engineering into government.