Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

ICEBlock and the Age of Digital Activism

Joshua Aaron

PrivacyTalks1 hr 25 minBeginnerOpen on YouTube ↗

Where

Talks
HOPE_16

Duration

1 hr 25 min

Explains the design, growth and safeguards of the anonymous ICEBlock app for reporting immigration enforcement sightings.

Summary

Joshua Aaron, creator of the ICEBlock app, explains why he built it after the 2024 election and how it grew to more than a million iOS users within months. He presents it as a crowdsourced early-warning tool: users report sightings of immigration enforcement agents, and nearby users see them on a map. He recounts how press coverage drove rapid growth, and the threats he and his family faced afterward, including the end of his wife's government job, which he ties to the app's publicity.

The middle of the talk covers the design priorities of anonymity, free access and simplicity. He says the database keeps very little: creation and modification timestamps, a packed coordinate value and a deletion flag. Sightings expire after four hours. Safeguards include report rate limits, blocking duplicate sightings, and requiring a real address within a set radius. He also explains why there is no Android version yet, citing push notification design, server costs and the risks of sideloading.

In the question period, he said he will not open-source the codebase for now, and that he has no warrant canary and has received no formal legal demands. Attendees pressed him on false reports, threat modeling, transparency through published design documents or independent audits, and bringing in vetted outside advisers. He said he is open to outside input through his public accounts. The main takeaway for practitioners is the trade-off between data minimization and features, and between secrecy and independent verification.

Related talks