Out of sight, out of mind: Effects of displaying access-control information near the item it controls

Authors:
Kami Vaniea;Lujo Bauer;Lorrie Faith Cranor;Michael K. Reiter
Affiliations:
Carnegie Mellon University, Pittsburgh, PA, USA;Carnegie Mellon University, Pittsburgh, PA, USA;Carnegie Mellon University, Pittsburgh, PA, USA;University of North Carolina at Chapel Hill, Chapel Hill, USA
Venue:
PST '12 Proceedings of the 2012 Tenth Annual International Conference on Privacy, Security and Trust (PST)
Year:
2012

Citing 0
Cited 4

Studying access-control usability in the lab: lessons learned from four studies

Proceedings of the 2012 Workshop on Learning from Authoritative Security Experiment Results
The usability of truecrypt, or how i learned to stop whining and fix an interface

Proceedings of the third ACM conference on Data and application security and privacy
Retrospective privacy: managing longitudinal privacy in online social networks

Proceedings of the Ninth Symposium on Usable Privacy and Security
Toward strong, usable access control for shared distributed data

FAST'14 Proceedings of the 12th USENIX conference on File and Storage Technologies

Quantified Score

Hi-index	0.00

Visualization

Abstract

We take a detailed look at how users, while focusing on non-permission tasks, notice and fix access-control permission errors depending on where the access-control policy is spatially located on a photo-sharing website. The access-control policy was placed on an online photo-sharing website under the photo or album, on the sidebar, or on a separate settings page. We find that placing the access-control policy directly under photos and album thumbnails improves participants' ability to notice errors in their access-control settings without negatively impacting non-access-control tasks.