Consumer IoT devices may suffer malware attacks, and be recruited into botnets or worse. There is evidence that generic advice to device owners to address IoT malware can be successful, but this does not account for emerging forms of persistent IoT malware. Less is known about persistent malware, which resides on persistent storage, requiring targeted manual effort to remove it. This paper presents a field study on the removal of persistent IoT malware by consumers. We partnered with an ISP to contrast remediation times of 760 customers across three malware categories: Windows malware, non-persistent IoT malware, and persistent IoT malware. We also contacted ISP customers identified as having persistent IoT malware on their network-attached storage devices, specifically QSnatch. We found that persistent IoT malware exhibits a mean infection duration many times higher than Windows or Mirai malware; QSnatch has a survival probability of 30% after 180 days, whereby most if not all other observed malware types have been removed. For interviewed device users, QSnatch infections lasted longer, so are apparently more difficult to get rid of, yet participants did not report experiencing difficulty in following notification instructions. We see two factors driving this paradoxical finding: First, most users reported having high technical competency. Also, we found evidence of planning behavior for these tasks and the need for multiple notifications. Our findings demonstrate the critical nature of interventions from outside for persistent malware, since automatic scan of an AV tool or a power cycle, like we are used to for Windows malware and Mirai infections, will not solve persistent IoT malware infections.

For the period surrounding the 2018 Dutch municipal elections, a team of researchers from the Delft University of Technology investigated the effect of the digital environment on parliamentary democracy. An interdisciplinary group of researchers combined expertise on digital ethics, political theory, big data analytics, the economics of privacy and security, epistemology, media studies and computer science. This report presents the main findings, which are grouped around two main themes: political micro-targeting and ICT media. Societal themes that came to prominence over the research period, such as the debate over ‘fake news’ and the leaks of personal information that were used for political purposes by Facebook, as well as the implementation of new EU privacy regulation helped to put the research in a larger political context. The main findings provide a qualified picture. The influence of the digital revolution on democratic politics is already revolutionary, and the weaknesses of online platforms provide ample opportunities for derailing liberal democracy. Digital platforms are too closed-off, not mindful enough of individual digital rights, and biased in their (re)presentation of political pluralism. But the Netherlands has proven to be one of the few democracies that is relatively resilient, with an open multi-party system receptive to the political fragmentation that ICT developments encourage, and relatively high trust between citizens, in shared media organizations, and between political parties. In order not to be complacent in the face of fundamental challenges, the report provides several urgent recommendations. Next to several ‘reactive’ recommendations, which seek to remedy the weaknesses and dangers the digital environment poses to democracy, it also outlines an example of how the digital environment might be proactively redesigned in order to positively enhance the quality of the Dutch parliamentary system.