PRIVACY TOOLS
Module 8 – Privacy and anonymity tools
COMP 3564 – Usable Privacy and Security / Created & Designed by: Khosro Salmani
TODAY’S CLASS
• Types of privacy tools
• Opt-out tools
• Anonymity tools
• Discussion
PRIVACY ENHANCING TECHNOLOGY
Privacy enhancing technologies
This also is a privacy tool!
Keep it private!
Types of privacy tools
Types of privacy tools
• Cookie/tracker blockers • Anonymity
• Opt-out, do not track § Web traffic, email, bulletin boards,
surveys, voting
• Tracking awareness
• Obfuscation
• Encryption
§ Add noise to web browsing,
§ Email, chat, web traffic, VPN, files, searches, databases
file system, disk
• Physical
• Cleaners/wipers § Walls, curtains, blinds, laptop privacy
§ Delete/don’t store files screens, shredders
• Private browsing • Others?
But, as a programmer:
§ Where can privacy tools be implemented?
Where can privacy tools be implemented?
• Built into browsers • Server-side tool
• Browser plugins • Built into operating
• Mobile apps systems
• Standalone user tool • On the network (routers,
firewalls, etc.)
• Web-based
Challenges!
Challenges
• Configuration
• Conveying purpose of tool
§ Provide options users can understand
§ In what way does this tool protect
and configure to match their
privacy?
preferences
• Conveying current privacy state § Don’t overwhelm users with too many
§ Is tool currently on and working? options
Have trackers been detected? § Make options easy to access
• Avoiding errors, failing safe
§ Will users believe they are protected
when they are not?
LET’S REVIEW A STUDY!
Why Johnny Can’t Opt Out
• August 2011 lab study
• 45 participants, each evaluated 1 of 9 tools
§ Screened for non-technical, no knowledge about privacy tools but interested
• Protocol
§ Task 1: Learn about and install the tool
§ Task 2: Change tool settings
§ Task 3: Browsing scenario
§ Exit questionnaire
Why Johnny Can’t Opt Out: A Usability Evaluation of Tools to Limit Online Behavioral Advertising. P. Leon, B. Ur, R. Balebako, L. Cranor, R. Shay, and Y. Wang. CHI
2012.
Online behavioral advertising (OBA)
Later that day!
OBA choice mechanisms
Three types of tools tested
Major problems with all tools
• Communication problems and
confusing interfaces
• Inappropriate defaults
• Users can’t distinguish between
trackers
• Need for feedback
• Users want protections that don’t break
websites
DAA program!
Opting out can be challenging
Ghostery (an example) configuration confusing
IE privacy settings use jargon
Blocks third-party cookies that do
not have a compact privacy policy
Restricts first-party cookies that
save information that can be used to
contact you without your implicit
consent
Takeaways from this study
for future programmers!
Takeaways for future programmers!
• Problematic defaults
• Poorly designed interfaces and jargon
• Feedback
• Misconceptions about opt-out tools
• Users unable to make meaningful
decisions on a per-company basis
Some improvements/changes
• Many changes to UIs of plugin tools
• Microsoft removed some privacy features from Edge
• Do Not Track standard continues to be a work in progress
Activity!
• Privacy tool discussion
§ What are your favorite privacy
tools?
§ What functions do they
perform?
§ What makes them usable?
QUESTIONS?