Sociotechnical Cybersecurity and Privacy (SCP)
Live blog of the Conference on Sociotechnical Cybersecurity and Privacy (SCP2026) which is a new conference this year created by merging EuroUSEC and STAST. The conference is being …
Symposium on Usable Security and Privacy - Day 3
Liveblog of Day 2 of SOUPS, featuring sessions on: Usable Security Mechanisms & Emerging Threats; Scams, Fraud & Misinformation; GenAI Privacy & Risks; and ecurity Advice & …
Symposium on Usable Privacy and Security (SOUPS 2026) - Day 2
Liveblog of Day 2 of SOUPS, featuring sessions on: Privacy Notices, Permissions & Labels; Security Operatoins & Practitioners; Phishing & Social Engineering; and At-Risk & …
Symposium on Usable Privacy and Security (SOUPS 2026) - Day 1
Liveblog of Day 1 of SOUPS, featuring sessions on: Authentication * Credentials as well as Families & Shared Devices. The SOUPS community is made up of researchers that care about …
SOUPS Workshop on Community on AI Research and Abuse (CARA)
Workshop of a range of experts on non-consentual intimate imagry. As always, the below is my interpretation of what people said, and should not be interpreted as a directly quote …
Symposium on Access Control Models and Technologies (SACMAT'26)
I am live blogging Symposium on Access Control Models and Technologies (SACMAT'26) which is being hosted by the University of Waterloo this year. The below summaries are my …
Common Referencing Errors
A set of recommendations around GenAI usage based on the citation review done for SOUPS 2026. Recommendations are aimed at labs that are trying to implement policies around GenAI …
Security and Human Behavior 2026 Day 2
Live blog of the different SHB speakers on Day 1. SHB is an invite-only conference but the issues discussed are interesting and important to people world-wide. This live blog is …
Security and Human Behavior 2026 Day 1
Live blog of the different SHB speakers on Day 1. SHB is an invite-only conference but the issues discussed are interesting and important to people world-wide. This live blog is …
Security and Human Behavior 2025 Day 2
Live blog of the different SHB speakers on Day 2. SHB is an invite-only conference but the issues discussed are interesting and important to people world-wide. This live blog is …
Security and Human Behavior 2025 Day 1
Live blog of the different SHB speakers on Day 1. SHB is an invite-only conference but the issues discussed are interesting and important to people world-wide. This live blog is …
Writeup on Brian Krebs
Nice Wall Street Journal write up about Brian Krebs the cyber security investigative reporter. It has a couple of details about the Snowflake hack. But what I find most intersting …
Maclean's: article on outages in 2025 (by me)
I authored a “year ahead” piece for Maclean’s magazine about what outages are likely to look like in 2025: More Frequent - and Disruptive - Tech Outages Are on the Way. Spoiler: I …
Privacy, security, and consent (Talk)
Talk at the University of Waterloo Cybersecurity Privacy Institute 6th Annual Conference. The talk covers issues around how develoeprs are learning about what privacy entails and …
NIST Password Guidance Draft seems sane
Password guidance has historically ignored human factors issues and required people to do things like changes passwords frequently which seems secure, but actually reduces security …
PEDRO (PEt Decision suppoRt tOol)
Website that explains different common privacy enhancing tools (PETs) and addresses common barriers and misconceptions people have when trying to use them.
Crowdstrike Outage - thoughts about updates
Crowdstrike issued a problematic update that impacted about 8.5 million Windows computers sending them into a Blue Screen Of Death and taking down millions of vital systems …
FTC Research Questions
The FTC has a list of Research Questions for academics that they are particularly interested in. At the top of the list is “AI-enabled Fraud and Scams”.
Techreports with Security and Privacy Statistics
List of different sources of statistics that I use for research papers and presentations regarding security, privacy, and phishing.
USEC Survey scales
Personal list of survey scales useful in Usable Security research. The list is not comprehensive and instead represents scales I have been exposed to or seen presented. General …
CS4G Netsim as a teaching tool
Network simlator that is intended for teaching purposes. I'm experimenting with using in in a classroom context.
Security and Human Behavior (SHB) 2024 - Day 2
Interdisciplinary invite-only conference discussing how people interact with security technology. The conference is designed to share ideas, questions, and promote interesting …
Security and Human Behavior (SHB) 2024 - Day 1
Interdisciplinary invite-only conference discussing how people interact with security technology. The conference is designed to share ideas, questions, and promote interesting …
Re-locating to the University of Waterloo
In 2023 I (Dr Vaniea) relocated from the University of Edinburgh in Scotland to the University of Waterloo. Some reflections on the move and the impact on the TULiPS lab.
admin