After several attendees of this year’s Chaos Communication Congress (CCC) in Germany said organizers have continued to downplay or ignore issues of harassment and sexual assault, Chelsea Komlo, an open-source software developer and Tor contributor, is speaking out publicly about the rape and assault she says she experienced in an attempt to help combat the toxic environment that some say has plagued the annual privacy and security conference for
After several attendees of this year’s Chaos Communication Congress (CCC) in Germany said organizers have continued to downplay or ignore issues of harassment and sexual assault, Chelsea Komlo, an open-source software developer and Tor contributor, is speaking out publicly about the rape and assault she says she experienced in an attempt to help combat the toxic environment that some say has plagued the annual privacy and security conference for years.
The Chaos Computer Club, which organizes CCC, faced pressure in 2016 to bolster its response to harassment after multiple women came forward to accuse former Tor developer Jacob Appelbaum of rape and sexual assault. Appelbaum had delivered talks at CCC and been a prominent member of the security community.
Komlo told Gizmodo that CCC’s inaction this year in response to previous allegations of assault prompted her to speak publicly about her experience with Appelbaum for the first time. Komlo says Appelbaum raped her after CCC in 2015, an incident she previously described publicly under the pseudonym “River” in mid-2016.
“We’ve seen at CCC that the same things are continuing, and I felt like doing this was really important to prevent future harm to other people,” Komlo told Gizmodo.
At this year’s CCC, which runs through December 30, attendees have said that the conference organizers allowed a person who allegedly assaulted another attendee last year to attend this year’s conference and rejected talks about harassment. Dirk Engling, a spokesperson for CCC, told Gizmodo that the conference received very few submissions for talks about harassment but added that there are several lightning talks and self-organized sessions about these topics occurring at the conference.
Thomas Covenant, a programmer attending CCC, revealed this week that the conference had chosen not to ban their abuser even after Covenant provided medical records and police reports detailing the assault. Engling said that CCC reviewed the materials provided by Covenant and chose not to issue a ban.
“The process, in this case, had several unfortunate delays that led to the decision taking way too long. This is an issue we are discussing internally and will address in the future,” Engling said.
Covenant’s story of CCC not taking action to remove an accused abuser rang eerily similar to Komlo’s own experience and motivated her to speak about her experience, she said. “It mirrored the environment that allowed abuse to happen to me—people knowing about abuse and still allowing that person to come to the conference and be welcome and be around vulnerable people,” Komlo said. “That environment is what resulted in my rape by Jacob.”
Komlo was attending her first CCC in 2015 when she briefly met Appelbaum. He later propositioned her for group sex within minutes of seeing her at a social event, she said, and she declined.
Komlo had previously seen Appelbaum give a talk about privacy, which inspired her to become more involved with the security community. She looked up to him, and when others laughed off his sexual comments, she followed their lead.
After each CCC, which is held at the end of December, many attendees travel to Berlin to celebrate New Year’s Eve. Komlo went on the trip in 2015 and stayed with Appelbaum for several days in Berlin. During the trip, they had consensual sex, Komlo said. Appelbaum also raped her one night while she was intoxicated and argued with her when she asked him to stop, she said.
“What has always stood out to me is that when I met him, he asked me several times to participate in an orgy with his male friends. And I said no,” she explained. “I said no every single time and was extremely clear. He worked to earn my trust, and when I was alone with him and his male friends, he crossed those boundaries.”
In her 2016 pseudonymous statement, in a recent interview with Gizmodo, and in an on-record statement published today, Komlo said that Appelbaum raped her in front of several male friends while she was intoxicated. One of the other men present also assaulted her, she said.
“I didn’t understand what was happening, but I eventually said no. The next thing I remember was him having sex with me in front of his friends,” she said. “I had never expressed consent and what happened was something I explicitly told Jake I didn’t want to do. I wasn’t able, at the time, to stop what was happening to me. It wasn’t a misunderstanding or me wishing later it hadn’t happened.”
Two individuals confirmed to Gizmodo that Komlo told them about the incident in the months after it occurred. One individual asked not to be named out of concern for their personal safety. The other is Isis Lovecruft, a Tor developer who has called attention to CCC’s handling of abuse and spoken out about their interactions with Appelbaum.
Komlo also participated in the Tor Project’s internal investigation into Appelbaum’s behavior, which concluded in his resignation from the organization, Tor Project’s executive director, Shari Steele, said.
“My reasoning for asking him to resign was broader than just Chelsea,” Steele said. “Chelsea was finally the straw that broke the camel’s back, but I had heard numerous accounts. When I asked him to resign, it was over a pattern of behavior.” Appelbaum resigned from the Tor Project on May 25 of last year. Tor hired an independent investigator to look into the allegations against Appelbaum, including Komlo’s, and found them to be credible, Steele explained.
Appelbaum did not respond to a request for comment from Gizmodo. In a 2016 statement, issued when the allegations against him became public, Appelbaum said that his accusers were participating in “a calculated and targeted attack” designed “to spread vicious and spurious allegations against me.”
Komlo considered publishing a statement about her experience in 2016, using her real name, but she ultimately decided not to because she feared retaliation and because it seemed that organizations with which Appelbaum was affiliated were taking action. The Tor Project, the privacy non-profit where Appelbaum had worked, conducted an internal investigation into his behavior and replaced its entire board.
The second individual involved in Komlo’s assault went through a community justice process, apologizing to her and engaging in a genuine effort to make things right, she said. “I forgave this person, and I firmly believe that individuals (and organizations) who have committed mistakes should be forgiven if they truly understand the harm done and genuinely work to make things right for the future,” Komlo wrote in her statement.
Lovecruft said that the community justice process can sometimes be helpful for groups reckoning with abuse. “An accountability process is a process,” they said in a message to Gizmodo. “Just like any process, as in software, there are edge cases, unexpected inputs. It needs maintenance, and sometimes patches, to keep it working as designed—just like any software. It is also important that both these processes have logic for handling fatal errors when the programme cannot continue, when something goes horribly wrong.”
CCC announced last year that Appelbaum would no longer be welcome at its events, although it did not mention him by name, instead describing him as “a regular visitor and speaker.”
But the renewed allegations of ignored misconduct at CCC led Komlo to believe that CCC isn’t taking abuse seriously.
