In April 2019, Thomas Dang was re-elected to the Legislative Assembly of Alberta in the new electoral district of Edmonton-South, defeating the United Conservative Party candidate Tunde Obasan by a narrow margin.
[7] The search was later linked to a hack on the Alberta government vaccine information website, which, according to Dang, he conducted to highlight security flaws in the site.
[9] During his time in opposition, he was a vocal critic against misuse of funds and brought forward motions to investigate spending scandals and errors of Government MLAs.
He called the move to increase a politicians' pay "absurd" and "hypocritical" while the Government is asking front-line and public sector workers for a wage rollback.
[19] In November 2021, Dang sent a letter to Elections Alberta requesting an independent review of the use of third-party money to purchase tickets to the United Conservative Party annual general meeting.
The location was chosen in part due to its proximity to both Anthony Henday Drive and the Queen Elizabeth Highway 2 (Alberta).
[25] During a late-night sitting of the Alberta Legislature, Premier Jason Kenney handed out earplugs to members of the United Conservative Party caucus while Dang was speaking.
[26] While the Kenney's press secretary called the move "a harmless and light-hearted attempt to boost government caucus morale", the Alberta Federation of Labour deemed it "outrageous and insulting".
[30] On March 22, Dang introduced a motion calling on the UCP government to ban "racist symbols and insignia" in public spaces as well as at demonstrations "meant to terrorize and promote racism".
[33][34] Dang was also the subject of a racist parody account linking him to North Korean dictator Kim Jong-un which was followed by multiple high-ranking UCP government staffers including Matt Wolf, Premier Jason Kenney's Executive Director of Issues Management.
Egg farmers have cheered the proposal, because the time change “plays havoc with the natural rhythm of poultry.” Dang also announced that he hoped to have a bill ready to be tabled in mid-March.
[47] Dang said that despite the vote he would like to continue the conversation and would support moving forward if other jurisdictions such as British Columbia and other parts of North America abolished time change as well.
[49] In October 2021, Dang called on Premier Jason Kenney to make vaccinations mandatory for all United Conservative MLAs and to remove any members who were unvaccinated from his caucus.
According to Notley, Dang offered his resignation as part of a "long-standing policy that members under active police investigation will not sit in the caucus".
[54] He then set out to test the vulnerability by entering Alberta premier Jason Kenney's birthdate and date of vaccination, which Dang later defended by saying the information was publicly available.
[53] After the hack, Dang contacted the NDP caucus, and the information was passed onto Alberta Health, with the vulnerability being fixed within weeks.
[53] Dang and the NDP's actions were criticized by UCP MLA and government whip Brad Rutherford, who said the party's "first instinct was to protect him, instead of being forthright with Albertans".
[55] In his white paper, Dang also criticized the Alberta government's lack of "basic" cybersecurity measures and called for the creation of an office dedicated to cyberdefence, along with a vulnerability disclosure program that encourages and rewards security researchers.
[55] The documents also said that the Alberta vaccine information portal received 1.78 million requests using Kenney's birthdate shortly after its launch, which it characterized as a "brute force attack" from Dang.
[58] Dang's decision to act alone also received criticism from NAIT cybersecurity chair John Zabiuk, who said that his actions were not consistent with those of an ethical hacker.
[55] However, other information security professionals like Brad Haines (better known as Renderman), have said that Dang's calls for improved cybersecurity oversight should be heard and that the RCMP response will likely have a chilling effect on ethical hackers.
[59] The methodology Dang used has been described as "common practice in the private sector" and experts have suggested Alberta should implement a bug bounty program without "[turning] a person's life upside down because he decided to become a whistleblower.