🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Join us Mar 4 at 4-5pm for a TCSDLS Zoom broadcast & snacks in LSRC D106 at Duke! Lorrie Faith Cranor Lorrie Cranor, CMU Prof & CyLab Director will present "From Password Requirements to IoT Cybersecurity Labels: Informing Public Policy with Research." bit.ly/dukecs-tcsdls-…

Do you work in security for industrial control systems? We want to hear from you! Help us design better anomaly detection systems by sharing your experience with us in a 1 hr remote interview. You'll get a $60 Amazon gift card on completion. Sign up here: forms.gle/jBjVfrsHQgLVZx…

(1/2) The FCC’s proposed Order to establish a voluntary IoT #cybersecurity labeling program calls for binary labels, but it does not specify the label format and all of the elements that should be included.

(2/2) Read a recent Communications of the ACM column by CyLab Director Lorrie Cranor, CMU Computer Science Department and CMU Software and Societal Systems Department faculty member Yuvraj Agarwal, and Duke CompSci's Pardis Emami-Naeini, which calls for inclusion of detailed #privacy and data collection information on #IoT device labels: cacm.acm.org/opinion/intern…

(1/6) CyLab director Lorrie Cranor along with Yuvraj Agarwal and Omer Akgul joined forces with Consumer Reports to request amendments to the FCC's Cybersecurity Labeling for Internet of Things Order, to be voted on by the #FCC this week: cylab.cmu.edu/_files/documen…

(2/6) We’re concerned that the current order omits critical privacy and security information and does not do enough to address consumers’ needs. The CyLab/CR letter asks the FCC to amend the order to correct three problems:

(3/6) The FCC order specifies labels on IoT device packaging with QR codes and the US Cyber Trust Mark and assumes that consumers will all scan the QR codes to get more information.

(4/6) However, our research shows that consumers want security and privacy information on product packaging, accessible without scanning. There should be an explicit requirement to include basic information on the product packaging.

(5/6) The FCC order mentions privacy along with security, but does not include any privacy requirements. IoT labels should include basic privacy information important to consumers such as what sensors a device has and what they do with the data they collect.

(6/6) The FCC order includes a list of required information that must be available through the label QR code. That list is missing critical security and privacy items. The FCC should revisit this list to ensure it includes key information.

Good a time as any to revisit this study from 2008 by Lorrie Cranor and co that found that it would take 244 hours (or a month, if you spent 10 hours a day reading) to review all the privacy policies you agree to in a given year: kb.osu.edu/server/api/cor…

Lorrie Cranor (Lorrie Cranor), CyLab Director, enjoys the cherry blossoms in DC between sessions of the Aspen Digital US Cybersecurity Group spring meeting.

📢📢📢WSIW is back for the 10th(!) time📢📢📢 Submit your work on security & privacy professionals. We accept many formats, get feedback on your work and/or publicize your research! Last year was awesome, this year will be too! ~10 days left to submit: security-information-workers.github.io

🏅Honorable Mention #CHI2024: "Interdisciplinary Approaches to Cybervulnerability Impact Assessment for Energy Critical Infrastructure" ✍️Authors: Andrea Gallardo, Robert Erbes, Katya LeBlanc, Lujo Bauer, Lorrie Cranor CMU Software and Societal Systems Department Idaho National Lab 🔗Details: programs.sigchi.org/chi/2024/progr…

📰Paper: "Is a Trustmark & QR Code Enough? The Effect of IoT Security & Privacy Label Information Complexity on Consumer Comprehension & Behavior" ✍️: Claire C. Chen, Dillon Shu, Hamsini Ravishankar, Xinran Li, Yuvraj Agarwal, Lorrie Cranor CMU Software and Societal Systems Department 🔗: programs.sigchi.org/chi/2024/progr…

Lorrie Cranor kindly provided a flashback of 20 years of SOUPS. Here are some highlights: The first SOUPS symposium was held Carnegie Mellon University CyLab in 2005. About 70 attendees gathered for talks, posters, discussion sessions and the first SOUPS ice cream social.

SOUPS 2024 second day is about to start! There is a nice board outside of the conference room for all of you to post your memory of the 20 years of SOUPS. Make sure you leave something! #soups2024

National Arts in Education Week is Sept. 9-13, serving as a reminder of the profound impact art has on humanity. Lorrie Cranor, Director of CyLab, shares some reflections below on how the arts have influenced both her personal and professional journey: cmu.edu/news/stories/a…

We're hiring security and privacy faculty at Carnegie Mellon University

I'm thrilled to join the board of directors of CDT! I first worked with them on P3P in the late 1990s and have been a fan ever since!