[USENIX Security '24] Data Subjects' Reactions to Exercising their Right of Access
Arthur Borem, Elleen Pan, Olufunmilola Obielodan, Aurelie Roubinowitz, Luca Dovichi, Michelle L. Mazurek, Blase Ur.
Proceedings of the 33rd USENIX Security Symposium. Philadelphia, PA, August 2024.
[ Paper ]

[USENIX Security '24] Why Aren't We Using Passkeys? Obstacles Companies Face Deploying FIDO2 Passwordless Authentication
Leona Lassak, Elleen Pan, Blase Ur, Maximilian Golla.
Proceedings of the 33rd USENIX Security Symposium. Philadelphia, PA, August 2024.
[ Paper | Extended Version ]

[PoPETs / PETS '24] What Does It Mean to Be Creepy? Responses to Visualizations of Personal Browsing Activity, Online Tracking, and Targeted Ads
Nathan Reitinger, Bruce Wen, Michelle L. Mazurek, Blase Ur.
Proceedings on Privacy Enhancing Technologies 2024(3). Bristol, UK, July 2024.
[ Paper ]

[EuroS&P '24] Can Allowlists Capture the Variability of Home IoT Device Network Behavior?
Weijia He, Kevin Bryson, Ricardo Calderon, Vijay Prakash, Nick Feamster, Danny Yuxing Huang, Blase Ur.
Proceedings of the 9th IEEE European Symposium on Security and Privacy (EuroS&P). Vienna, Austria, July 2024.
Distinguished Paper Award Runner-Up.
[ Paper ]

[ConPro '24] Evaluation of Ad Transparency Systems
Kevin Bryson, Arthur Borem, Phoebe Moh, Omer Akgul, Laura Edelson, Chris Geeng, Tobias Lauinger, Michelle Mazurek, Damon McCoy, Blase Ur.
Proceedings of the 8th Workshop on Technology and Consumer Protection (ConPro). San Francisco, CA, May 2024.
[ Extended Abstract ]

[CHI '24] JupyterLab in Retrograde: Contextual Notifications That Highlight Fairness and Bias Issues for Data Scientists
Galen Harrison, Kevin Bryson, Ahmad Emmanuel Balla Bamba, Luca Dovichi, Aleksander Herrmann Binion, Arthur Borem, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Online, May 2024.
Best Paper Award.
[ Paper ]

[CCS '23] Comprehension from Chaos: Towards Informed Consent for Private Computation
Bailey Kacsmar, Vasisht Duddu, Kyle Tilbury, Blase Ur, Florian Kerschbaum.
Proceedings of the 30th ACM Conference on Computer and Communications Security (CCS). Copenhagen, Denmark, November 2023.
[ Paper ]

[WPES '23] Analysis of Google Ads Settings Over Time: Updated, Individualized, Accurate, and Filtered
Nathan Reitinger, Bruce Wen, Michelle Mazurek, Blase Ur.
Proceedings of the 22nd Workshop on Privacy in the Electronic Society (WPES). Copenhagen, Denmark, November 2023.
[ Paper ]

[USENIX Security '23] A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords
Alexandra Nisenoff, Maximilian Golla, Miranda Wei, Juliette Hainline, Hayley Szymanek, Annika Braun, Annika Hildebrandt, Blair Christensen, David Langenberg, Blase Ur.
Proceedings of the 32nd USENIX Security Symposium. Anaheim, CA, August 2023.
Distinguished Paper Award.
[ Paper | Extended Version ]

[USENIX Security '23] Defining "Broken": User Experiences and Remediation Tactics When Ad-Blocking or Tracking-Protection Tools Break a Website’s User Experience
Alexandra Nisenoff, Arthur Borem, Madison Pickering, Grant Nakanishi, Maya Thumpasery, Blase Ur.
Proceedings of the 32nd USENIX Security Symposium. Anaheim, CA, August 2023.
[ Paper ]

[USENIX ;login: Magazine] Measuring the Risk Password Reuse Poses for a University
Alexandra Nisenoff, Maximilian Golla, Blase Ur.
USENIX ;login: magazine. July 27, 2023.
[ Article | Authors' Copy ]

[Poster @ SOUPS '23] Poster: MARI: Semi-Automated, Human-in-the-Loop Redaction of Text Corpora
Emma I. C. Peterson, Valerie Zhao, Dan Byrne, Blase Ur.
Proceedings of the Nineteenth Symposium On Usable Privacy and Security (SOUPS). Anaheim, CA, August 2023.
[ Extended Abstract | Poster ]

[IMWUT '22 / UbiComp '23] Helping Users Debug Trigger-Action Programs
Lefan Zhang, Cyrus Zhou, Michael L. Littman, Blase Ur, Shan Lu.
Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 6, 4, Article 196, December 2022. Melbourne, Australia, September 2023.
[ Paper ]

[UIST '22] Summarizing Sets of Related ML-Driven Recommendations for Improving File Management in Cloud Storage
Will Brackenbury, Kyle Chard, Aaron Elmore, Blase Ur.
Proceedings of the 35th ACM Symposium on User Interface Software and Technology (UIST). Bend, OR, October 2022.
[ Paper ]

[USENIX Security '22] "The Same PIN, Just Longer": On the (In)Security of Upgrading PINs from 4 to 6 Digits
Collins W. Munyendo, Philipp Markert, Alexandra Nisenoff, Miles Grant, Elena Korkes, Blase Ur, Adam J. Aviv.
Proceedings of the 31st USENIX Security Symposium. Boston, MA, August 2022.
[ Paper ]

[NAACL '22] Explaining Why: How Instructions and User Interfaces Impact Annotator Rationales When Labeling Text Data
Jamar L. Sullivan Jr., Will Brackenbury, Andrew McNutt, Kevin Bryson, Kwam Byll, Yuxin Chen, Michael L. Littman, Chenhao Tan, Blase Ur.
Proceedings of the 2022 Annual Conference of the North American Chapter of the Association for Computational Linguistics (NAACL). Seattle, WA, July 2022.
[ Paper ]

[Poster @ RLDM '22] Supporting End Users in Defining Reinforcement-Learning Problems for Human-Robot Interactions
Valerie Zhao, Michael L. Littman, Shan Lu, Sarah Sebo, Blase Ur.
Extended Abstracts of the Fifth Multi-disciplinary Conference on Reinforcement Learning and Decision Making (RLDM). Providence, RI, June 2022.
[ Extended Abstract ]

[WPES '21] From Secure to Military-Grade: Exploring the Effect of App Descriptions on User Perceptions of Secure Messaging
Omer Akgul, Ruba Abu-Salma, Wei Bai, Elissa M. Redmiles, Michelle L. Mazurek, Blase Ur.
Proceedings of the 20th Workshop on Privacy in the Electronic Society. Online, November 2021.
[ Paper ]

[UIST '21] KondoCloud: Improving Information Management in Cloud Storage via Recommendations Based on File Similarity
Will Brackenbury, Andrew McNutt, Kyle Chard, Aaron Elmore, Blase Ur.
Proceedings of the 34th ACM Symposium on User Interface Software and Technology (UIST). Online, October 2021.
[ Paper ]

[IMWUT '21 / UbiComp '21] Who Am I? A Design Probe Exploring Real-Time Transparency About Online and Offline User Profiling Underlying Targeted Ads
Natã M. Barbosa, Gang Wang, Blase Ur, Yang Wang.
Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 5, 3, Article 88 (IMWUT / UbiComp). Online, September 2021.
[ Paper ]

[EuroS&P '21] SoK: Context Sensing for Access Control in the Adversarial Home IoT
Weijia He, Valerie Zhao, Olivia Morkved, Sabeeka Siddiqui, Earlence Fernandes, Josiah Hester, Blase Ur.
Proceedings of the 6th IEEE European Symposium on Security and Privacy (EuroS&P). Online, September 2021.
[ Paper ]

[USENIX Security '21] "It's Stored, Hopefully, on an Encrypted Server": Mitigating Users' Misconceptions About FIDO2 Biometric WebAuthn
Leona Lassak, Annika Hildebrandt, Maximilian Golla, Blase Ur.
Proceedings of the 30th USENIX Security Symposium. Online, August 2021.
[ Paper | Extended Version ]

[USENIX Security '21] Helping Users Automatically Find and Manage Sensitive, Expendable Files in Cloud Storage
Mohammad Taha Khan, Christopher Tran, Shubham Singh, Dimitri Vasilkov, Chris Kanich, Blase Ur, Elena Zheleva.
Proceedings of the 30th USENIX Security Symposium. Online, August 2021.
[ Paper ]

[SOUPS '21] Pursuing Usable and Useful Data Downloads Under GDPR/CCPA Access Rights via Co-Design
Sophie Veys, Daniel Serrano, Madison Stamos, Margot Herman, Nathan Reitinger, Michelle L. Mazurek, Blase Ur.
Proceedings of the Seventeenth Symposium On Usable Privacy and Security (SOUPS). Online, August 2021.
[ Paper ]

[SOUPS '21] User Perceptions of the Usability and Security of Smartphones as FIDO2 Roaming Authenticators
Kentrell Owens, Olabode Anise, Amanda Krauss, Blase Ur.
Proceedings of the Seventeenth Symposium On Usable Privacy and Security (SOUPS). Online, August 2021.
[ Paper ]

[SOUPS '21] On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security
Christian Stransky, Dominik Wermke, Johanna Schrader, Nicolas Huaman, Yasemin Acar, Anna Lena Fehlhaber, Miranda Wei, Blase Ur, Sascha Fahl.
Proceedings of the Seventeenth Symposium On Usable Privacy and Security (SOUPS). Online, August 2021.
[ Paper ]

[SIGIR '21] Files of a Feather Flock Together? Measuring and Modeling How Users Perceive File Similarity in Cloud Storage
Will Brackenbury, Galen Harrison, Kyle Chard, Aaron Elmore, Blase Ur.
Proceedings of the 44th International ACM SIGIR Conference on Research and Development in Information Retrieval (SIGIR). Online, July 2021.
[ Paper ]

[UMAP '21] Do Users Have Contextual Preferences for Smartphone Power Management?
Sophie Welber, Valerie Zhao, Claire Dolin, Olivia Morkved, Henry Hoffmann, Blase Ur.
Proceedings of the 29th Conference on User Modeling, Adaptation and Personalization (UMAP). Online, June 2021.
[ Paper ]

[ICWSM '21] Perceptions of Retrospective Edits, Changes, and Deletion on Social Media
Günce Su Yılmaz, Fiona Gasaway, Blase Ur, Mainack Mondal.
Proceedings of the Fifteenth International AAAI Conference on Web and Social Media (ICWSM). Online, June 2021.
[ Paper ]

[CHI '21] Understanding Trigger-Action Programs Through Novel Visualizations of Program Differences
Valerie Zhao, Lefan Zhang, Bo Wang, Michael L. Littman, Shan Lu, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Online, May 2021.
Honorable Mention Award.
[ Paper ]

[CHI '21] Understanding the Security and Privacy Advice Given to Black Lives Matter Protesters
Maia J. Boyd, Jamar L. Sullivan Jr., Marshini Chetty, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Online, May 2021.
Honorable Mention Award.
[ Paper ]

[IMWUT '20 / UbiComp '20] Trace2TAP: Synthesizing Trigger-Action Programs From Traces of Behavior
Lefan Zhang, Weijia He, Olivia Morkved, Valerie Zhao, Michael L. Littman, Shan Lu, Blase Ur.
Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies 4, 3, Article 104 (IMWUT / UbiComp). Online, September 2020.
[ Paper ]

[USENIX Security '20] What Twitter Knows: Characterizing Ad Targeting Practices, User Perceptions, and Ad Explanations Through Users' Own Twitter Data
Miranda Wei, Madison Stamos, Sophie Veys, Nathan Reitinger, Justin Goodman, Margot Herman, Dorota Filipczuk, Ben Weinshel, Michelle L. Mazurek, Blase Ur.
Proceedings of the 29th USENIX Security Symposium. Online, August 2020.
[ Paper | Appendix ]

[WAY '20] A Framework For Evaluating the Usability and Security of Mobile Phones as FIDO2 Roaming Authenticators
Kentrell Owens, Blase Ur, Olabode Anise.
Proceedings of the Who Are You?! Adventures in Authentication 2020 Workshop (WAY). Online, August 2020.
[ Paper ]

[ConPro '20] Designing Visualization and Exploration Tools for Data Access Under GDPR/CCPA
Sophie Veys, Madison Stamos, Nathan Reitinger, Michelle L. Mazurek, Blase Ur.
Proceedings of the 4th Workshop on Technology and Consumer Protection (ConPro). San Francisco, CA, May 2020.
[ Paper ]

[CHI '20] Taking Data Out of Context to Hyper-Personalize Ads: Crowdworkers' Privacy Perceptions and Decisions to Disclose Private Information
Julia Hanson, Miranda Wei, Sophie Veys, Matthew Kugler, Lior Strahilevitz, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Honolulu, HI, April 2020.
Honorable Mention Award.
[ Paper ]

[Poster @ CHI '20 LBW] Visualizing Differences to Improve End-User Understanding of Trigger-Action Programs
Valerie Zhao, Lefan Zhang, Bo Wang, Shan Lu, Blase Ur.
Extended Abstracts of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI LBW). Honolulu, HI, April 2020.
[ Extended Abstract ]

[FAT* '20] An Empirical Study on the Perceived Fairness of Realistic, Imperfect Machine Learning Models
Galen Harrison, Julia Hanson, Christine Jacinto, Julio Ramirez, Blase Ur.
Proceedings of the 2020 Conference on Fairness, Accountability, and Transparency (FAT*). Barcelona, Spain, January 2020.
[ Paper ]

[CCS '19] Oh, the Places You've Been! User Reactions to Longitudinal Transparency About Third-Party Web Tracking and Inferencing
Ben Weinshel, Miranda Wei, Mainack Mondal, Euirim Choi, Shawn Shan, Claire Dolin, Michelle L. Mazurek, Blase Ur.
Proceedings of the 26th ACM Conference on Computer and Communications Security (CCS). London, UK, November 2019.
[ Paper | Code ]

[CCS '19] Moving Beyond Set-It-And-Forget-It Privacy Settings on Social Media
Mainack Mondal, Günce Su Yılmaz, Noah Hirsch, Mohammad Taha Khan, Michael Tang, Christopher Tran, Chris Kanich, Blase Ur, Elena Zheleva.
Proceedings of the 26th ACM Conference on Computer and Communications Security (CCS). London, UK, November 2019.
[ Paper ]

[INTERACT '19] Evidence Humans Provide When Explaining Data-Labeling Decisions
Judah Newman, Bowen Wang, Valerie Zhao, Amy Zeng, Michael L. Littman, Blase Ur.
Proceedings of the 17th IFIP TC.13 International Conference on Human-Computer Interaction (INTERACT). Paphos, Cyprus, September 2019.
[ Paper ]

[Poster @ SOUPS '19] Poster: "What was that site doing with my Facebook password?" Designing Password-Reuse Notifications
Miranda Wei, Maximilian Golla, Juliette Hainline, Lydia Filipe, Markus Dürmuth, Elissa M. Redmiles, Blase Ur.
Proceedings of the Fifteenth Symposium On Usable Privacy and Security (SOUPS). Santa Clara, CA, July 2019.
Distinguished Poster Award.
[ Paper (from CCS) ]

[IEEE S&P '19] Reasoning Analytically About Password-Cracking Software
Enze Liu, Amanda Nakanishi, Maximilian Golla, David Cash, Blase Ur.
Proceedings of the 40th IEEE Symposium on Security and Privacy (S&P / "Oakland"). San Francisco, CA, May 2019.
[ Paper | Video preview | Code ]

[SafeThings '19] When Smart Devices Are Stupid: Negative Experiences Using Home Smart Devices
Weijia He, Jesse Martinez, Roshni Padhi, Lefan Zhang, Blase Ur.
Proceedings of the IEEE Workshop on the Internet of Safe Things (SafeThings). San Francisco, CA, May 2019.
[ Paper ]

[ConPro '19] Towards Considering and Documenting Algorithmic Fairness in the Data Science Workflow
Galen Harrison, Julia Hanson, Blase Ur.
Proceedings of the 3rd Workshop on Technology and Consumer Protection (ConPro). San Francisco, CA, May 2019.
[ Paper ]

[CHI '19] How Users Interpret Bugs in Trigger-Action Programming
Will Brackenbury, Abhimanyu Deora, Jillian Ritchey, Jason Vallee, Weijia He, Guan Wang, Michael L. Littman, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Glasgow, UK, May 2019.
[ Paper | Appendix (regression tables, survey instrument) ]

[ICSE '19] AutoTap: Synthesizing and Repairing Trigger-Action Programs Using LTL Properties
Lefan Zhang, Weijia He, Jesse Martinez, Noah Brackenbury, Shan Lu, Blase Ur.
Proceedings of the 41st ACM/IEEE International Conference on Software Engineering (ICSE). Montreal, QC, Canada, May 2019.
[ Paper ]

[CCS '18] "What was that site doing with my Facebook password?" Designing Password-Reuse Notifications
Maximilian Golla, Miranda Wei, Juliette Hainline, Lydia Filipe, Markus Dürmuth, Elissa M. Redmiles, Blase Ur.
Proceedings of the 25th ACM Conference on Computer and Communications Security (CCS). Toronto, ON, Canada, October 2018.
[ Paper ]

[USENIX Security '18] Rethinking Access Control and Authentication for the Home Internet of Things (IoT)
Weijia He, Maximilian Golla, Roshni Padhi, Jordan Ofek, Markus Dürmuth, Earlence Fernandes, Blase Ur.
Proceedings of the 27th USENIX Security Symposium. Baltimore, MD, August 2018.
[ Paper ]

[WAY '18] The Password Doesn't Fall Far: How Service Influences Password Choice
Miranda Wei, Maximilian Golla, Blase Ur.
Proceedings of the Who Are You?! Adventures in Authentication 2018 Workshop (WAY). Baltimore, MD, August 2018.
[ Paper ]

[FOCI '18] Exploring User Mental Models of End-to-End Encrypted Communication Tools
Ruba Abu-Salma, Elissa M. Redmiles, Blase Ur, Miranda Wei.
Proceedings of the 8th USENIX Workshop on Free and Open Communications on the Internet (FOCI). Baltimore, MD, August 2018.
[ Paper ]

[WSSP '18] Clap On, Clap Off: Usability of Authentication Methods in the Smart Home
Weijia He, Juliette Hainline, Roshni Padhi, Blase Ur.
Proceedings of the Interactive Workshop on the Human Aspect of Smarthome Security and Privacy (WSSP). Baltimore, MD, August 2018.
[ Paper ]

[Poster @ SOUPS '18] Poster: Making Retrospective Data Management Usable
Noah Hirsch, Chris Kanich, Mohammad Taha Khan, Xuefeng Liu, Mainack Mondal, Michael Tang, Christopher Tran, Blase Ur, William Wang, Günce Su Yilmaz, Elena Zheleva.
Proceedings of the Fourteenth Symposium On Usable Privacy and Security Poster Session (SOUPS). Baltimore, MD, August 2018.
[ Extended Abstract | Poster ]

[HILDA '18] Draining the Data Swamp: A Similarity-based Approach
Will Brackenbury, Rui Liu, Mainack Mondal, Aaron Elmore, Blase Ur, Kyle Chard, Michael J. Franklin.
Proceedings of the Workshop on Human-In-the-Loop Data Analytics (HILDA). Houston, TX, June 2018.
[ Paper ]

[CHI '18] Unpacking Perceptions of Data-Driven Inferences Underlying Online Targeting and Personalization
Claire Dolin, Ben Weinshel, Shawn Shan, Chang Min Hahn, Euirim Choi, Michelle L. Mazurek, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Montreal, QC, Canada, April 2018.
[ Paper | Slides | Video preview ]

[CHI '18] Forgotten But Not Gone: Identifying the Need for Longitudinal Data Management in Cloud Storage
Mohammad Taha Khan, Maria Hyun, Chris Kanich, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Montreal, QC, Canada, April 2018.
[ Paper ]

[WWW '18] Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode
Yuxi Wu, Panya Gupta, Miranda Wei, Yasemin Acar, Sascha Fahl, Blase Ur.
Proceedings of the Web Conference (WWW). Lyon, France, April 2018.
[ Paper | Slides ]

[USENIX ;login: Magazine] Better Passwords Through Science (And Neural Networks)
William Melicher, Blase Ur, Sean M. Segreti, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor.
USENIX ;login: magazine. 42(4). Winter 2017.
[ Article ]

[USENIX Security '17] SmartAuth: User-Centered Authorization for the Internet of Things
Yuan Tian, Nan Zhang, Yueh-Hsun Lin, Xiaofeng Wang, Blase Ur, Xianzheng Guo, Patrick Tague.
Proceedings of the 26th USENIX Security Symposium. Vancouver, BC, Canada, August 2017.
[ Paper ]

[Poster @ SOUPS '17] Poster: Data-Driven Transparency About Online Tracking
Euirim Choi, Claire Dolin, Aaron Goldman, Chang Min Hahn, Shawn Shan, Ben Weinshel, Michelle L. Mazurek, Blase Ur.
Proceedings of the Thirteenth Symposium On Usable Privacy and Security (SOUPS). Santa Clara, CA, July 2017.
Distinguished Poster Award.
[ Extended Abstract | Poster ]

[Poster @ SOUPS '17] Poster: Poking at the Cloud: Identifying Factors Behind Selective Cloud Uploading
Amanda Aizuss, Max Chen, Galen Harrison, Sotiri Komissopoulos, Blase Ur.
Proceedings of the Thirteenth Symposium On Usable Privacy and Security (SOUPS). Santa Clara, CA, July 2017.
[ Extended Abstract | Poster ]

[SOUPS '17] Diversify to Survive: Making Passwords Stronger with Adaptive Policies
Sean M. Segreti, William Melicher, Saranga Komanduri, Darya Melicher, Richard Shay, Blase Ur, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor, Michelle L. Mazurek.
Proceedings of the Thirteenth Symposium On Usable Privacy and Security (SOUPS). Santa Clara, CA, July 2017.
[ Paper ]

[CHI '17] Design and Evaluation of a Data-Driven Password Meter
Blase Ur, Felicia Alfieri, Maung Aung, Lujo Bauer, Nicolas Christin, Jessica Colnago, Lorrie Faith Cranor, Henry Dixon, Pardis Emami Naeini, Hana Habib, Noah Johnson, William Melicher.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Denver, CO, May 2017.
Best Paper Award.
[ Paper | Supplementary Material | Demo | Code ]

[CHI '17] Can Unicorns Help Users Compare Crypto Key Fingerprints?
Joshua Tan, Lujo Bauer, Joseph Bonneau, Lorrie Faith Cranor, Jeremy Thomas, Blase Ur.
Proceedings of the ACM SIGCHI Conference on Human Factors in Computing Systems (CHI). Denver, CO, May 2017.
[ Paper ]

[USEC '17] Password Creation in the Presence of Blacklists
Hana Habib, Jessica Colnago, William Melicher, Blase Ur, Sean Segreti, Lujo Bauer, Nicolas Christin, Lorrie Faith Cranor.
Proceedings of the NDSS Workshop on Usable Security 2017 (USEC). San Diego, CA, February 2017.
[ Paper ]