Reflecting on Twenty Years of Usable Privacy and Security
summary
Community builds a usable-security discipline, compiles a 90-page literature review turned book, and extracts concrete lessons: browser security warnings largely disappear after design and trust shifts; Let's Encrypt replaced manual certificate churn and reduced barriers to HTTPS; device pairing evolves from typing 30-digit hex keys to short numeric comparisons that actually work (device pairing moved from 30-digit keys to short numeric comparisons). Research methods scale and tighten, studies broaden to developers and admins, and small pragmatic artifacts succeed—privacy choices icon rolls out on many sites—while provenance, phishing, and business-model constraints remain unsolved.
AI-written summary · about
chapters (8)
- 0:00SOUPS introduction
- 2:00Usable security prehistory
- 8:27SOUPS community early days
- 13:45SOUPS first decade findings
- 22:32SOUPS impact on research
- 27:11Providence and business challenges
- 32:55Culture politics and internet
- 36:06Advice for future SOUPS
related talks
43mA short examination on the intersection of security and usability
52mPrivacy & Security, Policy & Technology
29mSecurity by(e) Design?
45mBuilding Trust with UX Design: Examples from IoT and Beyond
50mShifting Privacy In: How Privacy and Security Can Strengthen Each Other
01h 03mWhy Don't Users Do What They are Supposed to Do? A look at users and security
01h 00mSecure Computing and Hands-on Privacy By Design
28mBeyond Code and Clicks: UX Insights to Security Software