publications

Why Johnny Can’t Use Agents: Industry Aspirations vs. User Realities with AI Agents

Do Vision-Language Models Respect Contextual Integrity in Location Disclosure?

Supporting Informed Self-Disclosure: Design Recommendations for Presenting AI-Estimates of Privacy Risks to Users

Privy: Envisioning and Mitigating Privacy Risks for Consumer-facing AI Product Concepts

Transformational Provocations for Usable Privacy and Security: Designing Beyond Compliance and Expert Norms

Probabilistic Reasoning with LLMs for Privacy Risk Estimation

Imago Obscura: An Image Privacy AI Co-pilot to Enable Identification and Mitigation of Risks

Sound Check: Auditing Recent Audio Dataset Practices

Actions Speak Louder Than Words: Agent Decisions Reveal Implicit Biases in Language Models

Of Secrets and Seedphrases: Conceptual Misunderstandings and Security Challenges for Seed Phrase Management among Cryptocurrency Users

On-demand RFID: Improving Privacy, Security, and User Trust in RFID Activation through Physically-Intuitive Design

Purpose Mode: Reducing Distraction Through Toggling Attention Capture Damaging Patterns on Social Media Websites

Modeling End-User Affective Discomfort With Mobile App Permissions Across Physical Contexts

Measuring, Modeling, and Helping People Account for Privacy Risks in Online Self-Disclosures with AI

Design(ing) Fictions for Collective Civic Reporting of Privacy Harms

Granular Privacy Control for Geolocation with Vision Language Models

Reducing Privacy Risks in Online Self-Disclosures with Language Models

A Systematic Review of Biometric Monitoring in the Workplace: Analyzing Socio-technical Harms in Development, Deployment and Use

"It's a Fair Game", or Is It? Examining How Users Navigate Disclosure Risks and Benefits When Using LLM-Based Conversational Agents

“Don’t Put All Your Eggs In One Basket”: How Cryptocurrency Users Choose and Secure Their Wallets

Deepfakes, Phrenology, Surveillance, and More! A Taxonomy of AI Privacy Risks

The Subversive AI Acceptance Scale (SAIA-8): A Scale to Measure User Acceptance of AI-Generated, Privacy-Enhancing Image Modifications

I Don’t Know If We’re Doing Good. I Don’t Know If We’re Doing Bad”: Investigating How Practitioners Scope, Motivate, and Conduct Privacy Work When Developing AI Products

Privacy in the Age of AI: What's changed and what should we do about it?

Powering for Privacy: Improving User Trust in Smart Speaker Microphones with Intentional Powering and Perceptible Assurance

Iterative Design of An Accessible CryptoWallet for Blind Users

GuardLens: Supporting Safer Online Browsing for People with Visual Impairments

ImageAlly: A Human-AI Hybrid Approach to Support Blind People in Detecting and Redacting Private Image Content

The Slow Violence of Surveillance Capitalism: How Online Behavioral Advertising Harms People

When and Why Do People Want Ad Targeting Explanations? Evidence from a Four-Week, Mixed-Methods Field Study

The Security and Privacy Acceptance Framework (SPAF): A review of why users accept or reject cybersecurity and privacy best practices

“A Reasonable Thing to Ask For”: Towards a Unified Voice in Privacy Collective Action

To Self-Persuade or be Persuaded: Examining Interventions for Users’ Privacy Setting Selection

Image DePO: Towards Gradual Decentralization of Online Social Networks using Decentralized Privacy Overlays

SoK: Social Cybersecurity

Smart Webcam Cover: Exploring the Design of an Intelligent Webcam Cover to Improve Usability and Trust

"How Do You Not Lose Friends?": Synthesizing a Design Space of Social Controls for Securing Shared Digital Resources Via Participatory Design Jams

Bit Whisperer: Enabling Ad-hoc, Short-range, Walk-Up-and-Share Data Transmissions via Surface-restricted Acoustics

Privacy for the People? Exploring Collective Action as a Mechanism to Shift Power to Consumers in End-User Privacy

Exploring the Utility Versus Intrusiveness of Dynamic Audience Selection on Facebook

WebAlly: Making Visual Task-based CAPTCHAs Transferable for People with Visual Impairments

Spidey Sense: Designing Wrist-Mounted Affective Haptics for Communicating Cybersecurity Warnings

Individually Vulnerable, Collectively Safe: The Security and Privacy Practices of Households with Older Adults

Subversive AI: Resisting automated algorithmic surveillance with human-centered adversarial machine learning

Tensions between Access and Control in Makerspaces

Blind and Human: Exploring More Usable Audio CAPTCHA Designs

“We Hold Each Other Accountable”: Unpacking How Social Groups Approach Cybersecurity and Privacy Together

The Memory Palace: Exploring Visual-Spatial Paths for Strong, Memorable, Infrequent Authentication

A Typology of Perceived Triggers for End-User Security and Privacy Behaviors

Breaking! A Typology of Security and Privacy News and How It's Shared

Evolving the Ecosystem of Personal Behavioral Data

Thumprint: Socially-Inclusive Local Group Authentication Through Shared Secret Knocks

Social Cybersecurity: Understanding and Leveraging Social Influence to Increase Security Sensitivity

Expert and Non-Expert Attitudes towards (Secure) Instant Messaging

Epistenet: Facilitating Programmatic Access & Processing of Semantically Related Mobile Personal Data

A Market in Your Social Network: The Effects of Extrinsic Rewards on Friendsourcing and Relationships

Testing Computer-Aided Mnemonics and Feedback for Fast Memorization of High-Value Secrets

Social Cybersecurity: Applying Social Psychology to Cybersecurity

Examining Game World Topology Personalization

The Role of Social Influence In Security Feature Adoption

Increasing Security Sensitivity With Social Proof: A Large-Scale Experimental Confirmation

The Effect of Social Influence on Security Sensitivity

Revival Actions in a Shooter Game

CASA: Context-Aware Scalable Authentication

Exploring Capturable Everyday Memory for Autobiographical Authentication

Self-Censorship on Facebook

The Post That Wasn't: Examining Self-Censorship on Facebook

ACCessory: Keystroke Inference using Accelerometers on Smartphones

Towards Supporting Storytellers with Procedurally Generated Game Worlds