Replication: On the Ecological Validity of Online Security Developer Studies
summary
Replication hires 43 freelancers on Freelancer.com, asks them to implement password storage in JSF or Spring, scores submissions with a security scale, and gives a follow‑up security request plus milestone payments. Results show prompting increases secure behavior: 15 of 22 prompted hashed passwords versus only 5 of 21 non‑prompt secure, matching prior effect sizes. Removing the original study’s deception does not change outcomes, so deception is unnecessary for this password‑storage task with online freelancers.
AI-written summary · about
chapters (5)
related talks
05mCode Reviewing as Methodology for Online Security Studies with Developers - A Case
09mLet’s Hash: Helping Developers with Password Security
13mReplication: “No one can hack my mind” - 10 years later: An update and outlook on...
19mReplication: No One Can Hack My Mind Revisiting a Study on Expert and Non-Expert
09mReplication: Stories as Informal Lessons about Security
35mHow UX Research and Behavioral Science Can Help to Improve People's Cyber Security Behaviors
26mStudying the Impact of Managers on Password Strength and Reuse
21mEverything but the User: Reducing Password Reuse