Justin Sherman (@jshermcyber) is the technology advisor to the Surveillance Technology Oversight Project and a senior fellow at Duke’s Sanford School of Public Policy, where he runs its data brokerage research project.