Publications

(2023). "We have Disabled MFA for You": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments. CCS.

PDF Cite DOI

(2023). Pushed by Accident: A Mixed-Methods Study on Strategies of Handling Secret Information in Source Code Repositories. USENIX Security.

PDF Cite Dataset Slides Video Paper at USENIX

(2022). If You Can’t Get Them to the Lab: Evaluating a Virtual Study Environment with Security Information Workers. SOUPS.

PDF Cite Slides Video Paper at SOUPS