We are hiring a Lecturer or Senior Lecturer (Assistant/Associate Professor) in Cyber Security and Digital Harms. We are particularly interested in candidates with research interests in the human side of things (recent hires have been technical) but feel free to talk to us if you have any interest in the role and do pass on to others who you think might be interested: https://www.jobs.ac.uk/job/DCB581/lecturer-senior-lecturer-in-cyber-security-and-digital-harms-550711 #CyberSecurity #Jobs #UKHE #HumanFactors #Cybercrime #CyberLaw #UsableSecurity #HCI #Cyberpsychology

SOUPS will be co-located with the 32nd USENIX Security Symposium at the Anaheim Marriott in Anaheim, CA, USA. All workshops and beyond will be held on Sunday, August 6, 2023.

Submissions are due TODAY. See below for other important dates:
Notification of acceptance: Thursday, March 16, 2023
Final workshop CFP due date for workshop organizers: Thursday, March 30, 2023
Workshop paper submission deadline: Thursday, May 25, 2023
Workshop paper acceptance notification to authors: Thursday, June 8, 2023
Workshop final papers due: Thursday, June 22, 2023

More details, including examples of accepted proposals from previous years, can be found on https://www.usenix.org/conference/soups2023/call-for-workshops.

#academia #cfp #security #cybersecurity #usablesecurity @soups

UGH - The US Treasury Department's login page forces you to use an onscreen keyboard that only responds to mouse clicks and disables pasting in their password field.

I imagine the main outcome of this is convincing people to use crappier and shorter passwords.

I'm begging the world to pleaseeeee stop using the readonly attribute in your password input fields.

#UsableSecurity #Authentication #JustLetMePasteFromMyPasswordManagerDamnit

USENIX Security '23 Call for Papers
Upcoming deadlines:
Winter Deadline
--- Refereed paper submissions due: Tuesday, February 7, 2023, 11:59 pm AoE
Summer Deadline
--- Refereed paper submissions due: Tuesday, June 7, 2022, 11:59 pm AoE
.
#academia #cfp #security #cybersecurity #usablesecurity
https://www.usenix.org/conference/usenixsecurity23/call-for-papers

USENIX Security '23 Call for Papers
Upcoming deadlines:
Winter Deadline
--- Refereed paper submissions due: Tuesday, February 7, 2023, 11:59 pm AoE
Summer Deadline
--- Refereed paper submissions due: Tuesday, June 7, 2022, 11:59 pm AoE
.
#academia #cfp #security #cybersecurity #usablesecurity
https://www.usenix.org/conference/usenixsecurity23/call-for-papers

Password expiry policies.
The #PCI standard requires #password resets on user accounts every 90 days but only *if* passwords are used as single factor authentication. If my understanding is correct, having a #2fa / #mfa policy for all accounts would/should extend this reset cycle. However, I do not find a recommendation for how does it extend the reset cycle. Does anyone know?
#cybersecurity #usablesecurity
---
p.181 PCI-DSS-v4_0.pdf
8.3.9 If passwords/passphrases are used as the
only authentication factor for user access (i.e., in
any single-factor authentication implementation)
then either:
• Passwords/passphrases are changed at least
once every 90 days,
OR
• The security posture of accounts is dynamically
analyzed, and real-time access to resources is
automatically determined accordingly.

#Introduction

I'm a tech guy with artistic aspirations, an American-born Canadian living on an island in the Salish Sea. Some of my areas of lesser ignorance:

#edtech
#highered
#uxdesign
#usability
#usablesecurity

I love visual art of many kinds, though my own happy medium is #photography. I'm a #writer. I read widely, especially SF. I love music: #jazz, #electronica, #classical, #pop, #metal, #afrobeat, #blues, and more.

My wife and I have a #bernedoodle called Sasha (currently on the Bird Site as @SashaBDoodle) and our ultra-cuddly cat Fiona.

I'm adjusting to life with #LongCovid. Cannot recommend. I was an avid traveler before I fell ill and still try to explore when I can. Someday I want to get back to running, biking, and skiing.

Please say hi and let me know who I should be following!

@datensalat

Sie hat keine besonderen Smartphone-Skills. Bisher kommt uns #GrapheneOS in der Benutzung nicht besonders zugenagelt vor. Insofern war Moritz Tremmels Darstellung bei Golem schon zutreffend: GrapheneOS liefert #UsableSecurity – Englischkenntnisse vorausgesetzt.