Posts

Talk at the University of Waterloo Cybersecurity Privacy Institute 6th Annual Conference. The talk covers issues around how develoeprs are learning about what privacy entails and how the documents that claim to support them are sometimes used to influence behavior.

Password guidance has historically ignored human factors issues and required people to do things like changes passwords frequently which seems secure, but actually reduces security since it forces people to pick weaker passwords that they can easily memorize. NIST is finally taking some of these points into account with their new proposed guidance.

Website that explains different common privacy enhancing tools (PETs) and addresses common barriers and misconceptions people have when trying to use them.

Crowdstrike issued a problematic update that impacted about 8.5 million Windows computers sending them into a Blue Screen Of Death and taking down millions of vital systems worldwide including airlines and 911 call centers.

The FTC has a list of Research Questions for academics that they are particularly interested in. At the top of the list is “AI-enabled Fraud and Scams”.

List of different sources of statistics that I use for research papers and presentations regarding security, privacy, and phishing.

Personal list of survey scales useful in Usable Security research. The list is not comprehensive and instead represents scales I have been exposed to or seen presented. General USEC scales security and privacy attitudes, opinions, awareness, and behavior self-report

Network simlator that is intended for teaching purposes. I’m experimenting with using in in a classroom context.

Interdisciplinary invite-only conference discussing how people interact with security technology. The conference is designed to share ideas, questions, and promote interesting discussion that can lead to deeper understanding and future breakthroughs.

Interdisciplinary invite-only conference discussing how people interact with security technology. The conference is designed to share ideas, questions, and promote interesting discussion that can lead to deeper understanding and future breakthroughs.