Privacy and security researchers often rely on data collected through online crowdsourcing
platforms such as Amazon Mechanical Turk (MTurk) and Prolific. Prior work---which used …

Phishing is a form of cybercrime and a threat that allows criminals, phishers, to deceive end
users in order to steal their confidential and sensitive information. Attackers usually attempt …

In the last decades, research has shown that both technical solutions and user perceptions
are important to improve security and privacy in the digital realm. The field of 'usable …

Phishing attacks are on the rise, and phishing websites are everywhere, denoting the
brittleness of security mechanisms reliant on blocklists. To cope with this threat, many works …

The use of security awareness and education pro-grammes is very common in
organisations. But how effective are they over time? Some initial research on this question …

In human factor fields such as human-computer interaction (HCI) and psychology,
researchers have been concerned that participants mostly come from WEIRD (Western …

Non-expert users are often forced to make decisions about security and privacy in their daily
lives. Prior research has shown that non-expert users ask strangers for advice about digital …

The current design of email authentication mechanisms has made it challenging for email
providers to establish the authenticity of email messages with complicated provenance, such …

Email has become an essential service for global communication. In email protocols, a
Delegation Mechanism allows emails to be sent by other entities on behalf of the email …

This work explores the security and privacy perceptions, practices, and challenges Pakistani
immigrants face in the US. We also explore how parent-child dynamics affect immigrants' …