Symposium On Usable Privacy and Security最新文献

"Is Reporting Worth the Sacrifice of Revealing What I Have Sent?": Privacy Considerations When Reporting on End-to-End Encrypted Platforms “为了报道而牺牲我所发送的内容值得吗?”:端到端加密平台报告时的隐私考虑

Symposium On Usable Privacy and Security Pub Date : 2023-06-18 DOI: 10.48550/arXiv.2306.10478

Leijie Wang, Ruotong Wang, S. Williams-Ceci, Sanketh Menda, Amy X. Zhang

{"title":"\"Is Reporting Worth the Sacrifice of Revealing What I Have Sent?\": Privacy Considerations When Reporting on End-to-End Encrypted Platforms","authors":"Leijie Wang, Ruotong Wang, S. Williams-Ceci, Sanketh Menda, Amy X. Zhang","doi":"10.48550/arXiv.2306.10478","DOIUrl":"https://doi.org/10.48550/arXiv.2306.10478","url":null,"abstract":"User reporting is an essential component of content moderation on many online platforms -- in particular, on end-to-end encrypted (E2EE) messaging platforms where platform operators cannot proactively inspect message contents. However, users' privacy concerns when considering reporting may impede the effectiveness of this strategy in regulating online harassment. In this paper, we conduct interviews with 16 users of E2EE platforms to understand users' mental models of how reporting works and their resultant privacy concerns and considerations surrounding reporting. We find that users expect platforms to store rich longitudinal reporting datasets, recognizing both their promise for better abuse mitigation and the privacy risk that platforms may exploit or fail to protect them. We also find that users have preconceptions about the respective capabilities and risks of moderators at the platform versus community level -- for instance, users trust platform moderators more to not abuse their power but think community moderators have more time to attend to reports. These considerations, along with perceived effectiveness of reporting and how to provide sufficient evidence while maintaining privacy, shape how users decide whether, to whom, and how much to report. We conclude with design implications for a more privacy-preserving reporting system on E2EE messaging platforms.","PeriodicalId":273244,"journal":{"name":"Symposium On Usable Privacy and Security","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-18","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132786065","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Iterative Design of An Accessible Crypto Wallet for Blind Users 盲人可访问加密钱包的迭代设计

Symposium On Usable Privacy and Security Pub Date : 2023-06-09 DOI: 10.48550/arXiv.2306.06261

Zhixuan Zhou, Tanusree Sharma, Luke Emano, Sauvik Das, Yang Wang

引用次数: 1

Fight Fire with Fire: Hacktivists' Take on Social Media Misinformation 以其人之道还治其人之身:黑客分子对社交媒体错误信息的看法

Symposium On Usable Privacy and Security Pub Date : 2023-02-15 DOI: 10.48550/arXiv.2302.07788

Filipo Sharevski, Benjamin Kessell

引用次数: 0

A Design Space for Effective Privacy Notices 有效隐私通知的设计空间

Symposium On Usable Privacy and Security Pub Date : 2015-07-22 DOI: 10.1017/9781316831960.021

F. Schaub, Rebecca Balebako, Adam L. Durity, L. Cranor

{"title":"A Design Space for Effective Privacy Notices","authors":"F. Schaub, Rebecca Balebako, Adam L. Durity, L. Cranor","doi":"10.1017/9781316831960.021","DOIUrl":"https://doi.org/10.1017/9781316831960.021","url":null,"abstract":"Notifying users about a system's data practices is supposed to enable users to make informed privacy decisions. Yet, current notice and choice mechanisms, such as privacy policies, are often ineffective because they are neither usable nor useful, and are therefore ignored by users. Constrained interfaces on mobile devices, wearables, and smart home devices connected in an Internet of Things exacerbate the issue. Much research has studied usability issues of privacy notices and many proposals for more usable privacy notices exist. Yet, there is little guidance for designers and developers on the design aspects that can impact the effectiveness of privacy notices. In this paper, we make multiple contributions to remedy this issue. We survey the existing literature on privacy notices and identify challenges, requirements, and best practices for privacy notice design. Further, we map out the design space for privacy notices by identifying relevant dimensions. This provides a taxonomy and consistent terminology of notice approaches to foster understanding and reasoning about notice options available in the context of specific systems. Our systemization of knowledge and the developed design space can help designers, developers, and researchers identify notice and choice requirements and develop a comprehensive notice concept for their system that addresses the needs of different audiences and considers the system's limitations and opportunities for providing notice.","PeriodicalId":273244,"journal":{"name":"Symposium On Usable Privacy and Security","volume":"58 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-07-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115979819","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 302

On the Memorability of System-generated PINs: Can Chunking Help? 关于系统生成pin的可记忆性:分块有帮助吗?

Symposium On Usable Privacy and Security Pub Date : 2015-06-12 DOI: 10.5072/ZENODO.309748

J. Huh, Hyoungshick Kim, R. Bobba, Masooda N. Bashir, K. Beznosov

{"title":"On the Memorability of System-generated PINs: Can Chunking Help?","authors":"J. Huh, Hyoungshick Kim, R. Bobba, Masooda N. Bashir, K. Beznosov","doi":"10.5072/ZENODO.309748","DOIUrl":"https://doi.org/10.5072/ZENODO.309748","url":null,"abstract":"To ensure that users do not choose weak personal identification numbers (PINs), many banks give out systemgenerated random PINs. 4-digit is the most commonly used PIN length, but 6-digit system-generated PINs are also becoming popular. The increased security we get from using system-generated PINs, however, comes at the cost of memorability. And while banks are increasingly adopting systemgenerated PINs, the impact on memorability of such PINs has not been studied. We conducted a large-scale online user study with 9,114 participants to investigate the impact of increased PIN length on the memorability of PINs, and whether number chunking 1 techniques (breaking a single number into multiple smaller numbers) can be applied to improve memorability for larger PIN lengths. As one would expect, our study shows that system-generated 4-digit PINs outperform 6-, 7-, and 8-digit PINs in long-term memorability. Interestingly, however, we find that there is no statistically significant difference in memorability between 6-, 7-, and 8-digit PINs, indicating that 7-, and 8-digit PINs should also be considered when looking to increase PIN length to 6-digits from currently common length of 4-digits for improved security. By grouping all 6-, 7-, and 8-digit chunked PINs together, and comparing them against a group of all non-chunked PINs, we find that chunking, overall, improves memorability of system-generated PINs. To our surprise, however, none of the individual chunking policies (e.g., 0000-00-00) showed statistically significant improvement over their peer non� Part of this work was done while Dr. Huh and Dr. Bobba were at the University of Illinois. 1 Note that our notion of chunking differs from the traditional notion in that we do not chunk numbers into semantically meaningful pieces.","PeriodicalId":273244,"journal":{"name":"Symposium On Usable Privacy and Security","volume":"62 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2015-06-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121012290","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 28

Retrospective privacy: managing longitudinal privacy in online social networks 回顾性隐私:在线社交网络纵向隐私管理

Symposium On Usable Privacy and Security Pub Date : 2013-07-24 DOI: 10.1145/2501604.2501608

Oshrat Ayalon, Eran Toch

引用次数: 74

On the ecological validity of a password study 论密码研究的生态效度

Symposium On Usable Privacy and Security Pub Date : 2013-07-24 DOI: 10.1145/2501604.2501617

S. Fahl, M. Harbach, Y. Acar, Matthew Smith

引用次数: 117

Memory retrieval and graphical passwords 记忆检索和图形密码

Symposium On Usable Privacy and Security Pub Date : 2013-07-24 DOI: 10.1145/2501604.2501619

E. Stobert, R. Biddle

引用次数: 73

Sleights of privacy: framing, disclosures, and the limits of transparency 隐私的诡计:框架、披露和透明度的限制

Symposium On Usable Privacy and Security Pub Date : 2013-07-24 DOI: 10.1145/2501604.2501613

Idris Adjerid, A. Acquisti, L. Brandimarte, G. Loewenstein

引用次数: 124

Do not embarrass: re-examining user concerns for online tracking and advertising 不要尴尬:重新审视用户对在线跟踪和广告的担忧

Symposium On Usable Privacy and Security Pub Date : 2013-07-24 DOI: 10.1145/2501604.2501612

L. Agarwal, Nisheeth Shrivastava, S. Jaiswal, S. Panjwani

引用次数: 64