Kami Vaniea
  • About me
  • Projects
  • Publications
  • Blog
  • Teaching
  • Students
ESC

Searching...

No results found

↑↓ Navigate ↵ Select
Powered by Hugo Blox
  • Publications
    • There’s a (pot)hole in your privacy policy: Privacy Concerns in Canadian Problem-Reporting Websites
    • Composition of Access Control Schemes via Co-Existence: Three Case-Studies
    • AI-Enhanced Email Security: A Novel Pipeline for Phishing Campaign Detection and Profiling
    • Why do They Need to Know I Spotted a Pothole? Privacy Issues in Canadian Municipal Problem Reporting Websites
    • SoK: Grouping Spam and Phishing Email Threats for Smarter Security
    • Judging Phishing Under Uncertainty: How Do Users Handle Inaccurate Automated Advice?
    • PhishCoder: Efficient Extraction of Contextual Information from Phishing Emails
    • Phishing Codebook: A Structured Framework for the Characterization of Phishing Emails
    • Not as easy as just update: Survey of System Administrators and Patching Behaviours
    • Using Clustering Algorithms to Automatically Identify Phishing Campaigns
    • DarkDialogs: Automated detection of 10 dark patterns on cookie dialogs
    • Twitter has a Binary Privacy Setting, are Users Aware of How It Works?
    • Multi-User Smart Speakers - A Narrative Review of Concerns and Problematic Interactions
    • "I didn't click": What users say when reporting phishing
    • Data-Enhanced Design: Engaging Designers in Exploratory Sensemaking with Multimodal Data
    • Embedding Privacy Into Design Through Software Developers: Challenges and Solutions
    • To Patch, or not To Patch? That is the Question: A Case Study of System Administrators' Online Collaborative Behaviour
    • Context-based Clustering to Mitigate Phishing Attacks
    • PhishED: Automated contextual feedback for reporting phishing
    • Recruiting Participants with Programming Skills: A Comparison of Four Crowdsourcing Platforms and a CS Student Mailing List
    • From an Authentication Question to a Public Social Event: Characterizing Birthday Sharing on Twitter
    • Lessons Learned From Recruiting Participants With Programming Skills for Empirical Privacy and Security Studies
    • Understanding Privacy Switching Behaviour on Twitter
    • Can I Borrow Your ATM? Using Virtual Reality for (Simulated) In Situ Authentication Research
    • Stay Home! Conducting Remote Usability Evaluations of Novel Real-World Authentication Systems Using Virtual Reality
    • Understanding Privacy-Related Advice on Stack Overflow
    • Virtual Reality Observations: Using Virtual Reality to Augment Lab-Based Shoulder Surfing Research
    • Deciding on Personalized Ads: Nudging Developers About User Privacy
    • Code-Level Dark Patterns: Exploring Ad~Networks' Misleading Code Samples with Negative Consequences for Users
    • I Don't Need an Expert! Making URL Phishing Features Human Comprehensible
    • Privacy Champions in Software Teams: Understanding Their Motivations, Strategies, and Challenges
    • RepliCueAuth: Validating the Use of a lab-based Virtual Reality Setup for Evaluating Authentication Systems
    • Security Notifications in Static Analysis Tools: Developers' Attitudes, Comprehension, and Ability to Act on Them
    • "Developers are Responsible": What Ad Networks Tell Developers About Privacy
    • Owning and Sharing: Privacy Perceptions of Smart Speaker Users
    • A Case Study of Phishing Incident Response in an Educational Organization
    • Fast and Secure Authentication in Virtual Reality using Coordinated 3D Manipulation and Pointing
    • Observing Virtual Avatars: The Impact of Avatars’ Fidelity on Identifying Interactions
    • Prototyping Usable Privacy and Security Systems: Insights from Experts
    • "Anyone Else Seeing this Error?": Community, System Administrators, and Patch Information
    • What is this URL's Destination? Empirical Evaluation of Users' URL Reading
    • Knowledge-driven Biometric Authentication in Virtual Reality
    • RubikAuth: Fast and Secure Authentication in Virtual Reality
    • Understanding Privacy-Related Questions on Stack Overflow
    • Analysing Privacy Leakage of Life Events on Twitter
    • Analysis of publicly available anti-phishing webpages: contradicting information, lack of concrete advice and very narrow attack vector
    • "I Don't Know Too Much About It": On the Security Mindsets of Computer Science Students
    • A Survey on Developer-Centred Security
    • Saudis' Conceptualisation of Disturbing Content on Social Media
    • A Review of Human-and Computer-Facing URL Phishing Features
    • Automatic phishing detection versus user training, Is there a middle ground using XAI?
    • Faheem: Explaining URLs to people using a Slack bot
    • Permission Impossible: Teaching Firewall Configuration in a Game Environment
    • Capturing the Connections: Unboxing Internet of Things Devices
    • Viewing the Viewers: Publishers' Desires and Viewers' Privacy Concerns in Social Networks
    • Was my message read? Privacy and signaling on Facebook messenger
    • Debunking security-usability tradeoff myths
    • Tales of Software Updates: The process of updating software
    • Understanding Saudis' privacy concerns when using WhatsApp
    • Poster: A User Study of WhatsApp Privacy Settings Among Arab Users
    • Computer security information in stories, news articles, and education documents
    • Betrayed By Updates: How Negative Experiences Affect Future Security
    • Out of the loop: How automated software updates cause unintended security consequences
    • Out of sight, out of mind: Effects of displaying access-control information near the item it controls
    • More than skin deep: Measuring effects of the underlying model on access-control system usability
    • Access Control for Home Data Sharing: Attitudes, Needs and Practices
    • Access Control for Home Data Sharing: Attitudes, Needs and Practices
    • Effects of access-control policy conflict-resolution methods on policy-authoring usability
    • Effects of access-control policy conflict-resolution methods on policy-authoring usability
    • Real life challenges in access-control management
    • A user study of policy creation in a flexible access-control system
    • A user study of policy creation in a flexible access-control system
    • Access Control Policy Analysis and Visualization Tools for Security Professionals
    • Evaluating Assistance of Natural Language Policy Authoring
    • Lessons learned from the deployment of a smartphone-based access-control system
    • User-controllable security and privacy for pervasive computing
    • Comparing Access-Control Technologies: A Study of Keys and Smartphones
    • Lessons learned from the deployment of a smartphone-based access-control system
  • Posts
    • Sociotechnical Cybersecurity and Privacy (SCP)
    • Symposium on Usable Security and Privacy - Day 3
    • Symposium on Usable Privacy and Security (SOUPS 2026) - Day 2
    • Symposium on Usable Privacy and Security (SOUPS 2026) - Day 1
    • SOUPS Workshop on Community on AI Research and Abuse (CARA)
    • Symposium on Access Control Models and Technologies (SACMAT'26)
    • Common Referencing Errors
    • Security and Human Behavior 2026 Day 2
    • Security and Human Behavior 2026 Day 1
    • Security and Human Behavior 2025 Day 2
    • Security and Human Behavior 2025 Day 1
    • Maclean's: article on outages in 2025 (by me)
    • Writeup on Brian Krebs
    • Privacy, security, and consent (Talk)
    • NIST Password Guidance Draft seems sane
    • PEDRO (PEt Decision suppoRt tOol)
    • Crowdstrike Outage - thoughts about updates
    • FTC Research Questions
    • Techreports with Security and Privacy Statistics
    • USEC Survey scales
    • CS4G Netsim as a teaching tool
    • Security and Human Behavior (SHB) 2024 - Day 2
    • Security and Human Behavior (SHB) 2024 - Day 1
    • Re-locating to the University of Waterloo
  • Study
    • Interview Study of Child Safety Engineers
  • Projects
    • E-Government Engagement
    • Developer-centered privacy
    • Smart Speaker Privacy
    • Patch Management
    • PhishEd
    • Phishing
    • Twitter Privacy
    • Virtual Reality Lab Studies
    • Chatty Factories
  • Slides
    • Slides
  • Recent & Upcoming Talks
  • Teaching

Re-locating to the University of Waterloo

Sep 5, 2023·
admin
· 1 min read
Image credit: Unsplash
post UWaterloo

In September 2023 I relocated to University of Waterloo. I am still an Honourary Fellow at the University of Edinburgh, likely for the next couple of years while my students there complete.

Last updated on Sep 5, 2023
Academic
← Security and Human Behavior (SHB) 2024 - Day 1 Jun 4, 2024

© 2026 Kami Vaniea. This work is licensed under CC BY NC ND 4.0

Made with Hugo Blox Kit. Clone this template →