I’ve been answering all scam calls I get recently and trying to politely talk to the person on the other end. I’ve found certain reasonable questions causes them to hang up right away.

I’ve been answering all scam calls I get recently and trying to politely talk to the person on the other end. I’ve found certain reasonable questions causes them to hang up right away.

Talk at the University of Waterloo Cybersecurity Privacy Institute 6th Annual Conference. The talk covers issues around how develoeprs are learning about what privacy entails and how the documents that claim to support them are sometimes used to influence behavior.

Password guidance has historically ignored human factors issues and required people to do things like changes passwords frequently which seems secure, but actually reduces security since it forces people to pick weaker passwords that they can easily memorize. NIST is finally taking some of these points into account with their new proposed guidance.

Website that explains different common privacy enhancing tools (PETs) and addresses common barriers and misconceptions people have when trying to use them.

Crowdstrike issued a problematic update that impacted about 8.5 million Windows computers sending them into a Blue Screen Of Death and taking down millions of vital systems worldwide including airlines and 911 call centers.

List of different sources of statistics that I use for research papers and presentations regarding security, privacy, and phishing.

Personal list of survey scales useful in Usable Security research. The list is not comprehensive and instead represents scales I have been exposed to or seen presented.

General USEC scales

security and privacy attitudes, opinions, awareness, and behavior self-report

Network simlator that is intended for teaching purposes. I’m experimenting with using in in a classroom context.