Kami Vaniea
@kaniea.bsky.social
Usable Security and Privacy researcher
Update and get ads on your smart fridge. Opt-out of update possible, but will then block other feature improvements and likely security patches. Interested to see how many opt-out.
arstechnica.com/gadgets/2025...
arstechnica.com/gadgets/2025...
Samsung makes ads on $3,499 smart fridges official with upcoming software update
Update introduces two ways for the fridges to show ads.
arstechnica.com
October 29, 2025 at 12:55 PM
Update and get ads on your smart fridge. Opt-out of update possible, but will then block other feature improvements and likely security patches. Interested to see how many opt-out.
arstechnica.com/gadgets/2025...
arstechnica.com/gadgets/2025...
Sirisha Rambhatla presenting at the @uwaterloo.ca cybersecurity and privacy institute industry day. Building efficient and safe LLMs.
October 28, 2025 at 2:33 PM
Sirisha Rambhatla presenting at the @uwaterloo.ca cybersecurity and privacy institute industry day. Building efficient and safe LLMs.
Incidents like this make patch management challenging. Windows patch broke mouse and keyboard support in *recovery mode*. Normal operation still fine, but if anything breaks.... recovery is now gone. How many admins even test for this?
www.tomshardware.com/software/win...
www.tomshardware.com/software/win...
Windows 11's October update just broke the Windows Recovery Environment — USB keyboards and mice unusable in Windows RE after latest bug hits
Another week, another OS-breaking bug.
www.tomshardware.com
October 20, 2025 at 5:19 PM
Incidents like this make patch management challenging. Windows patch broke mouse and keyboard support in *recovery mode*. Normal operation still fine, but if anything breaks.... recovery is now gone. How many admins even test for this?
www.tomshardware.com/software/win...
www.tomshardware.com/software/win...
Canadian Anti-Scam Coalition set to launch this afternoon, its an alliance between credit card companies, banks, telecoms, Canadian government, and tech companies. The aim is to share information and reduce fraud.
thelogic.co/news/big-ban...
thelogic.co/news/big-ban...
Canada’s big banks, telecoms and tech firms are joining forces to fight scams - The Logic
From Bell to Google, major firms in Canada are following Australia’s model of sharing information to fight fraudsters
thelogic.co
September 9, 2025 at 2:00 PM
Canadian Anti-Scam Coalition set to launch this afternoon, its an alliance between credit card companies, banks, telecoms, Canadian government, and tech companies. The aim is to share information and reduce fraud.
thelogic.co/news/big-ban...
thelogic.co/news/big-ban...
@lujobauer.bsky.social starting off USENIX security to a large packed room.
August 13, 2025 at 4:06 PM
@lujobauer.bsky.social starting off USENIX security to a large packed room.
Closing #soups2025 remarks by our incredible general chair Patrick Gage Kelly.
August 12, 2025 at 11:52 PM
Closing #soups2025 remarks by our incredible general chair Patrick Gage Kelly.
Clement Fung presenting about industrial control systems (ICS). They interviewed people who protect ICS. Current alarm systems have a great variety in how they are designed and even who is in charge of managing them.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
August 12, 2025 at 11:48 PM
Clement Fung presenting about industrial control systems (ICS). They interviewed people who protect ICS. Current alarm systems have a great variety in how they are designed and even who is in charge of managing them.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
Nina Gerber @ninag72.bsky.social presenting on social and emotional dimensions of security. How can security and privacy be made more enjoyable? Used sentence completion tasks. People found important but not interesting.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
August 12, 2025 at 11:31 PM
Nina Gerber @ninag72.bsky.social presenting on social and emotional dimensions of security. How can security and privacy be made more enjoyable? Used sentence completion tasks. People found important but not interesting.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
Qiurong Song presenting on predatory monetization in video games such as Roblox. Loot boxes being a example. Developers are adding predatory design on purpose. Use of possess and in-have currency make it harder to stay aware of how much is spent. #soups2025
www.usenix.org/conference/s...
www.usenix.org/conference/s...
August 12, 2025 at 11:15 PM
Qiurong Song presenting on predatory monetization in video games such as Roblox. Loot boxes being a example. Developers are adding predatory design on purpose. Use of possess and in-have currency make it harder to stay aware of how much is spent. #soups2025
www.usenix.org/conference/s...
www.usenix.org/conference/s...
Teens and privacy in terms of barrier management. Navigate self disclosure. Issues like ambiguous norms. Also the ability to trust an audience.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
August 12, 2025 at 10:57 PM
Teens and privacy in terms of barrier management. Navigate self disclosure. Issues like ambiguous norms. Also the ability to trust an audience.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
Jenny Tang presenting about doing and reporting statistics in research papers. #soup2025
There are many ways to do statistics incorrectly and even if the test is correct the necessary numbers to interpret them may not be provided.
@lujobauer.bsky.social
www.usenix.org/conference/s...
There are many ways to do statistics incorrectly and even if the test is correct the necessary numbers to interpret them may not be provided.
@lujobauer.bsky.social
www.usenix.org/conference/s...
August 12, 2025 at 10:15 PM
Jenny Tang presenting about doing and reporting statistics in research papers. #soup2025
There are many ways to do statistics incorrectly and even if the test is correct the necessary numbers to interpret them may not be provided.
@lujobauer.bsky.social
www.usenix.org/conference/s...
There are many ways to do statistics incorrectly and even if the test is correct the necessary numbers to interpret them may not be provided.
@lujobauer.bsky.social
www.usenix.org/conference/s...
Annalina Buckmann (soon on job market) presenting on sociodemographic factors and barriers to security and privacy adoption. Mapped findings to SPAF factors.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
August 12, 2025 at 10:04 PM
Annalina Buckmann (soon on job market) presenting on sociodemographic factors and barriers to security and privacy adoption. Mapped findings to SPAF factors.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
Anna-Marie Ortloff presenting a replication of the "No one can hack my mind" paper. #soups2025
Experts have even more focus on authentication. End users also using 2FA increasing anf anti virus usage going down.
www.usenix.org/conference/s...
Experts have even more focus on authentication. End users also using 2FA increasing anf anti virus usage going down.
www.usenix.org/conference/s...
August 12, 2025 at 9:45 PM
Anna-Marie Ortloff presenting a replication of the "No one can hack my mind" paper. #soups2025
Experts have even more focus on authentication. End users also using 2FA increasing anf anti virus usage going down.
www.usenix.org/conference/s...
Experts have even more focus on authentication. End users also using 2FA increasing anf anti virus usage going down.
www.usenix.org/conference/s...
Laura Marie Abels presenting on Social Desirability and developing a scale to measure it. #soups2025
www.usenix.org/conference/s...
www.usenix.org/conference/s...
August 12, 2025 at 9:33 PM
Laura Marie Abels presenting on Social Desirability and developing a scale to measure it. #soups2025
www.usenix.org/conference/s...
www.usenix.org/conference/s...
Lily Klucinec presenting about mobile money in Kenya which is a financial system tied to SIM cards. To withdraw money personal information currently have to be shared with a mobile money in-person agent. #soups2025 @lorriecranor.bsky.social
www.usenix.org/conference/s...
www.usenix.org/conference/s...
August 12, 2025 at 7:31 PM
Lily Klucinec presenting about mobile money in Kenya which is a financial system tied to SIM cards. To withdraw money personal information currently have to be shared with a mobile money in-person agent. #soups2025 @lorriecranor.bsky.social
www.usenix.org/conference/s...
www.usenix.org/conference/s...
Time based one time passwords, such as those generated by Google Authenticator app. Part of the FIDO Alliance. The paper compares physical secury keys to TOTPs+passwords.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
August 12, 2025 at 7:13 PM
Time based one time passwords, such as those generated by Google Authenticator app. Part of the FIDO Alliance. The paper compares physical secury keys to TOTPs+passwords.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
Peter Mayer presenting about forest time users of password managers #soups2025
Before the study on average had 36 passwords, some of which were reused. There was use of the manager such as adding new passwords.
www.usenix.org/conference/s...
Before the study on average had 36 passwords, some of which were reused. There was use of the manager such as adding new passwords.
www.usenix.org/conference/s...
August 12, 2025 at 6:58 PM
Peter Mayer presenting about forest time users of password managers #soups2025
Before the study on average had 36 passwords, some of which were reused. There was use of the manager such as adding new passwords.
www.usenix.org/conference/s...
Before the study on average had 36 passwords, some of which were reused. There was use of the manager such as adding new passwords.
www.usenix.org/conference/s...
Analysis of NIST authentication advice in standards documents. #soups2025
Multi factor advice is followed by many universities. Password regular password changes (no longer recommended) still common.
www.usenix.org/conference/s...
Multi factor advice is followed by many universities. Password regular password changes (no longer recommended) still common.
www.usenix.org/conference/s...
August 12, 2025 at 6:44 PM
Analysis of NIST authentication advice in standards documents. #soups2025
Multi factor advice is followed by many universities. Password regular password changes (no longer recommended) still common.
www.usenix.org/conference/s...
Multi factor advice is followed by many universities. Password regular password changes (no longer recommended) still common.
www.usenix.org/conference/s...
People take videos of strangers and then use TikTok to identify the person. Many people are identified this way. While sometimes heartwarming, it can also be used for abuse and stalking people.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
August 12, 2025 at 5:18 PM
People take videos of strangers and then use TikTok to identify the person. Many people are identified this way. While sometimes heartwarming, it can also be used for abuse and stalking people.
#soups2025
www.usenix.org/conference/s...
#soups2025
www.usenix.org/conference/s...
Usability of privacy nutrition labels. #soups2025
Terms in privacy labels are widely misunderstood.
www.usenix.org/conference/s...
Terms in privacy labels are widely misunderstood.
www.usenix.org/conference/s...
August 12, 2025 at 4:45 PM
Usability of privacy nutrition labels. #soups2025
Terms in privacy labels are widely misunderstood.
www.usenix.org/conference/s...
Terms in privacy labels are widely misunderstood.
www.usenix.org/conference/s...
Mark Wong presenting about essential online services and minoritised ethnic people. #soups2025
Concerns include control of personal data. People were being selective in what they share. They also make up days. That also don't use some services out of worries.
www.usenix.org/conference/s...
Concerns include control of personal data. People were being selective in what they share. They also make up days. That also don't use some services out of worries.
www.usenix.org/conference/s...
August 12, 2025 at 4:38 PM
Mark Wong presenting about essential online services and minoritised ethnic people. #soups2025
Concerns include control of personal data. People were being selective in what they share. They also make up days. That also don't use some services out of worries.
www.usenix.org/conference/s...
Concerns include control of personal data. People were being selective in what they share. They also make up days. That also don't use some services out of worries.
www.usenix.org/conference/s...
Amna Batool presenting on between court orders and platform policies at #soups2025
Non consentual image disclosure, even seemingly innocent images can in some cultures lead to violence.
www.usenix.org/conference/s...
Non consentual image disclosure, even seemingly innocent images can in some cultures lead to violence.
www.usenix.org/conference/s...
August 12, 2025 at 4:16 PM
Amna Batool presenting on between court orders and platform policies at #soups2025
Non consentual image disclosure, even seemingly innocent images can in some cultures lead to violence.
www.usenix.org/conference/s...
Non consentual image disclosure, even seemingly innocent images can in some cultures lead to violence.
www.usenix.org/conference/s...
August 12, 2025 at 4:02 PM
#soups2026 keynote Greg Chappell on "Mind the gap between research and practice"
August 12, 2025 at 2:08 PM
#soups2026 keynote Greg Chappell on "Mind the gap between research and practice"
