The field of computer security has military origins, and focuses on defending expert users from powerful adversaries. Traditionally there’s been little attention to the security needs of the most vulnerable. But that’s started to change recently. [Thread]
Who are some of the populations whose security needs have been ignored? Gig workers, refugees, victims of intimate partner violence, low-SES groups, and kids, among others. Here’s a roundup of recent research aimed at protecting these groups.
Computer Security and Privacy for Refugees in the United States
@AdaLerner @SamiaRazaq @franziroesner @yoshi_kohno franziroesner.com/pdf/simko-refu…
Refugees in the US are dependent on tech but face many infosec challenges, such as security questions that assume US cultural knowledge.
@AdaLerner @SamiaRazaq @franziroesner @yoshi_kohno franziroesner.com/pdf/simko-refu…
Refugees in the US are dependent on tech but face many infosec challenges, such as security questions that assume US cultural knowledge.
Great talk on digital security for gig workers by @KendraSerra usenix.org/conference/eni…
The burden of security falls on gig workers in the absence of an employer. For example, Uber drivers may be asked to pull over in the middle of a shift to re-authenticate.
The burden of security falls on gig workers in the absence of an employer. For example, Uber drivers may be asked to pull over in the middle of a shift to re-authenticate.
A team including @karen_ec_levy @TomRistenpart @PeriwinkleID @rhlchatterjee @diana_freed has been studying how tech is failing victims of intimate partner violence. ipvtechresearch.org
Summarized in this heartbreaking blog post by @natematias freedom-to-tinker.com/2018/02/23/how…
Summarized in this heartbreaking blog post by @natematias freedom-to-tinker.com/2018/02/23/how…
Another visceral paper on the same topic — Stories from Survivors: Privacy & Security Practices when Coping with Intimate Partner Abuse
mshelt.onl/p/matthews_et_…
mshelt.onl/p/matthews_et_…
Alice Marwick, @clairemfontaine, @zephoria studied how low-SES youth conceptualize and practice online privacy: journals.sagepub.com/doi/pdf/10.117…
There's a lot of room for improvement on how we teach kids about online privacy priyakumar.org/2018/06/18/des…
@DearPriya @jvitak @ineffablicious @tlclegg @ebonsign
@DearPriya @jvitak @ineffablicious @tlclegg @ebonsign
New types of digital divides: "lower income parents … are only 34% as likely as higher income parents to report helping their children with privacy settings,
and those with some college education are 3.2x more likely …"
@eredmil1
cs.umd.edu/~eredmiles/cam…
and those with some college education are 3.2x more likely …"
@eredmil1
cs.umd.edu/~eredmiles/cam…
Every paper in this thread is from 2017/2018! There are probably a few older ones I missed, but the point stands: research on the security needs of the marginalized has itself been marginalized in the security community until recently. Let's ensure the trickle turns into a flood!
Visually impaired people face many, many online privacy risks such as not being able to tell if someone's watching the screen, difficulty checking URLs for phishing, and the "notoriously volatile and complicated nature of Facebook’s privacy settings"
.@karen_ec_levy reminds me that the elderly are another vulnerable group, and points to her interesting paper on nursing home monitoring laws papers.ssrn.com/sol3/papers.cf… @l_kilgour
Technologists need to step up our game and work on privacy protections better tailored to this group.
Technologists need to step up our game and work on privacy protections better tailored to this group.
