"Something isn't secure, but I'm not sure how that translates into a problem"
summary
Redesign of Signal warnings replaces vague “safety numbers” with device identifiers grouped for easier reading, adds a privacy check flow that blocks next message and shows clear response costs. Work uses modified Signal source, Mechanical Turk pilots and a lab MITM simulation with 60 pairs (120 participants). Findings: comprehension questions correct rates rise (about 50% correct on key items), two-thirds notice risk under the new blocking flow, but only two participants actually used the privacy check when alerted.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:30How do we help users
- 0:55Authentication Ceremony
- 8:56Doctor Who
- 16:35Experiments
- 22:15Questions
related talks
12mCan Johnny be a whistleblower? A qualitative user study of a social authentication
01h 10mSignal's sustainability in an environment of mass surveillance
05mOn the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security
19mPrivate Communication, Human Agency, and Trust
22mPrivacy for Safety - OPSEC When the Threat is in the Home
12mIncreasing security without decreasing usability: A comparison of various verifiable...
43mReflecting on Twenty Years of Usable Privacy and Security
01h 13mEnhancing privacy and security through technological innovation