Bytes of Good Live podcast: Talking ‘Social Cybersecurity’ with Hack4Impact

One upside of video calls during the COVID-19 pandemic has been that I can attend or speak at virtually any location or event, without having to travel or move my schedule around too much. It’s helped me get more comfortable with public speaking, and exposed me to different audiences for my work.

In my latest public appearance: I appeared this spring with fellow CMU grad student Tom Magelinski at Bytes of Good Live, organized by Hack4Impact, a student-run nonprofit that promotes software for social good. We talked about our Social Cybersecurity research and what we know of careers in cybersecurity. The recording is available on YouTube, or click on the preview shown below to go to the video. Let me know what you think!

Alipay and WeChat Pay are everywhere in China – new paper for CSCW 2020 + reflections on cross-cultural research

This is a super-weird week to be submitting the camera-ready version of this research paper for publication at CSCW 2020. On Thursday, the “Executive Order Addressing the Threat Posed by WeChat” set a countdown of 45 days until the Tencent app would be “banned,” along with ByteDance’s TikTok. It recognizes what we document – the central role that these apps’ financial transactions play in the U.S.-intertwined Chinese economy.

Of course: I agree that apps such these, and Alipay and WeChat Pay, collect a lot of data about us while we go about using them for both fun and serious self-expression, and that this data is obtainable through various processes by the government of the country in which their parent companies are headquartered. I’ve long worried about our data security and privacy with regards to a constellation of mobile social media and short-form video apps, along with mobile payment options such as Apple Pay, Google Wallet Google Pay, PayPal, Venmo, Zelle, Square Cash, and Facebook’s Messenger and Novi. (Disclosure: I work at Facebook this summer, on marketing/ad data literacy.)

I felt a grief, however, at thinking of our global internet shrinking just a bit more from fully embracing the marvel of how newly connected so many of us can live and work despite our physical boundaries and limitations. The pandemic has sharpened my keen appreciation for how WeChat and other social media help family and friends bridge great distances, and for how much education, business and other knowledge work depends on reliable and usable communication software being available to everyone, everywhere.

It has been a joy and fascination to help pilot and design research into a very different manifestation of internet-enhanced life than the one I know in the U.S., directed by lead author Hong Shen (also a graduate of the University of Illinois College of Media) and with fellow HCII Phd researcher Haojian Jin and my awesome advisors, Laura Dabbish and Jason Hong. In China, you don’t have to go out with your wallet, just your phone! Even street vendors have QR codes for you to scan! Which gives rise to new forms of communication, such as attaching a message with a transfer equal to a penny! and new threat models, such as thieves coming in the night and replacing the QR code printout with their own!

And that was just from the pilot interviews. Read the preprint version of the paper for specifics on what my Chinese co-authors discovered when they conducted a survey (n=466) and interviews (n=12) in China about the advantages and the pitfalls of moving to a largely mobile and cashless economy.

I spoke up about my interest in the project in part thanks to Dan Grover, whose blogging (in English, thankfully 🙂 ) about his experience of working at WeChat as a product manager had piqued my interest in the various advances in the Chinese social media ecosystem. I couldn’t agree with him more in his tweeted responses to the EO on Thursday night:

‘A Self-Report Measure of End-User Security Attitudes (SA-6)’: New Paper

This month is a personal milestone – my FIRST first-author usability research paper is being published in the Proceedings of the Fifteenth USENIX Symposium on Usable Privacy and Security (SOUPS 2019).

I will present on Monday, Aug. 12, in Santa Clara, Calif., USA, about my creation of the SA-6 psychometric scale. This six-item scale is a lightweight tool for quantifying and comparing people’s attitudes about using expert-recommended security measures. (Examples of these include enabling two-factor authentication, going the extra mile to create longer passwords that are unique to each account, and taking care to update software and mobile apps as soon as these patches are available.)

The scale itself is reproduced below (download the PDF at https://socialcybersecurity.org/sa6.html ):

  • Generally, I diligently follow a routine about security practices.
  • I always pay attention to experts’ advice about the steps I need to take to keep my online data and accounts safe. 
  • I am extremely knowledgeable about all the steps needed to keep my online data and accounts safe. 
  • I am extremely motivated to take all the steps needed to keep my online data and accounts safe.
  • I often am interested in articles about security threats. 
  • I seek out opportunities to learn about security measures that are relevant to me.

Response set: 1=Strongly disagree, 2=Somewhat disagree, 3=Neither disagree nor agree, 4=Somewhat agree, 5=Strongly disagree. Score by taking the average of all six responses.

If you are a researcher who can make use of this work, please download our full research paper and cite us as follows: Cori Faklaris, Laura Dabbish and Jason I. Hong. 2019. A Self-Report Measure of End-User Security Attitudes (SA-6). In Proceedings of the Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019). USENIX Association, Berkeley, CA, USA. DOI: 10.13140/RG.2.2.29840.05125/3.

Many thanks to everyone who helped me develop and bring this project in for a landing, particularly Laura and Jason, Geoff Kaufman, Maria Tomprou, Sauvik Das, Sam Reig, Vikram Kamath Cannanure, Michael Eagle, and the members of the Connected Experience and CHIMPS labs at Carnegie Mellon University’s Human-Computer Interaction Institute. Funding for our Social Cybersecurity project is provided by the U.S. National Science Foundation under grant no. CNS-1704087.