Lorrie Cranor

Password researcher & fashion idol. Bad-ass cyberfeminist. Usable privacy & security prof. Quilter. Runs after 3 kids + soccer balls.

[CMU College of Engineering @CMUEngineering]

.@CMU_EPP professor and @CyLab Director Lorrie Cranor recently talked with @washingtonpost about her new children's book centered around educating young ones on privacy in the digital age.

https://t.co/P9ydxG68FZ

[CMU School of Computer Science @SCSatCMU]

The @washingtonpost profiles SCS's Lorrie Cranor and her work to teach kids the importance of privacy.
https://t.co/ITARqIyQIa

[CyLab @CyLab]

“Privacy, Please!”, @CyLab Director Lorrie Cranor’s (@lorrietweet) new children’s book, offers families of 4- to 6-year-olds a gentle and engaging way to talk about personal boundaries, independence, and digital safety. https://t.co/J9KjUpRQF0

#privacy

[Lorrie Cranor @lorrietweet]

I'm thrilled to join the board of directors of CDT! I first worked with them on P3P in the late 1990s and have been a fan ever since!

[Center for Democracy & Technology @CenDemTech]

.@CenDemTech is pleased to welcome Dr. Lorrie Cranor (@lorrietweet) to its Board of Directors 👏👏👏 Dr. Cranor is an expert in #privacy, security, technology, and public policy, currently on the faculty at Carnegie Mellon University. https://t.co/av2bL8fDSu

[Lorrie Cranor @lorrietweet]

We're hiring security and privacy faculty at @CarnegieMellon

[CyLab @CyLab]

.@CyLab is leading a university-wide priority hiring search for tenure-track faculty who focus on #security or #privacy. Learn more and apply today: https://t.co/lvJyYe84xg

[CyLab @CyLab]

National Arts in Education Week is Sept. 9-13, serving as a reminder of the profound impact art has on humanity. @lorrietweet, Director of @CyLab, shares some reflections below on how the arts have influenced both her personal and professional journey: https://t.co/YAp1gvezby

[Symposium on Usable Privacy and Security @SOUPSConference]

SOUPS 2024 second day is about to start! There is a nice board outside of the conference room for all of you to post your memory of the 20 years of SOUPS. Make sure you leave something! #soups2024

[Symposium on Usable Privacy and Security @SOUPSConference]

@lorrietweet kindly provided a flashback of 20 years of SOUPS. Here are some highlights:

The first SOUPS symposium was held @CarnegieMellon @CyLab in 2005. About 70 attendees gathered for talks, posters, discussion sessions and the first SOUPS ice cream social.

[CMU Human-Computer Interaction Institute @cmuhcii]

🏅Honorable Mention #CHI2024: "Interdisciplinary Approaches to Cybervulnerability Impact Assessment for Energy Critical Infrastructure"
✍️Authors: Andrea Gallardo, Robert Erbes, Katya LeBlanc, @lujobauer, @lorrietweet @S3DatCMU @INL
🔗Details: https://t.co/29ycnJub0a

[CMU Human-Computer Interaction Institute @cmuhcii]

📰Paper: "Is a Trustmark & QR Code Enough? The Effect of IoT Security & Privacy Label Information Complexity on Consumer Comprehension & Behavior"
✍️: Claire C. Chen, Dillon Shu, Hamsini Ravishankar, Xinran Li, Yuvraj Agarwal, @lorrietweet @S3DatCMU
🔗: https://t.co/9gFGolWcTt

[Omer Akgul @_oakgul]

📢📢📢WSIW is back for the 10th(!) time📢📢📢

Submit your work on security & privacy professionals. We accept many formats, get feedback on your work and/or publicize your research!

Last year was awesome, this year will be too!

~10 days left to submit: https://t.co/tbjwZVI8AV

[CyLab @CyLab]

Lorrie Cranor (@lorrietweet), @CyLab Director, enjoys the cherry blossoms in DC between sessions of the @AspenDigital US Cybersecurity Group spring meeting.

[Kashmir Hill @kashhill]

Good a time as any to revisit this study from 2008 by @lorrietweet and co that found that it would take 244 hours (or a month, if you spent 10 hours a day reading) to review all the privacy policies you agree to in a given year: https://t.co/OXj3c9jnXS

[CyLab @CyLab]

(6/6) The FCC order includes a list of required information that must be available through the label QR code. That list is missing critical security and privacy items. The FCC should revisit this list to ensure it includes key information.

[CyLab @CyLab]

(5/6) The FCC order mentions privacy along with security, but does not include any privacy requirements. IoT labels should include basic privacy information important to consumers such as what sensors a device has and what they do with the data they collect.

[CyLab @CyLab]

(4/6) However, our research shows that consumers want security and privacy information on product packaging, accessible without scanning. There should be an explicit requirement to include basic information on the product packaging.

[CyLab @CyLab]

(3/6) The FCC order specifies labels on IoT device packaging with QR codes and the US Cyber Trust Mark and assumes that consumers will all scan the QR codes to get more information.

[CyLab @CyLab]

(2/6) We’re concerned that the current order omits critical privacy and security information and does not do enough to address consumers’ needs. The CyLab/CR letter asks the FCC to amend the order to correct three problems:

[CyLab @CyLab]

(1/6) @CyLab director @lorrietweet along with Yuvraj Agarwal and @_oakgul joined forces with @ConsumerReports to request amendments to the @FCC's Cybersecurity Labeling for Internet of Things Order, to be voted on by the #FCC this week: https://t.co/TmTnStGeYn

[CyLab @CyLab]

(2/2) Read a recent @CACMmag column by @CyLab Director @lorrietweet, @CSDatCMU and @S3DatCMU faculty member Yuvraj Agarwal, and @dukecompsci's @PNaeini, which calls for inclusion of detailed #privacy and data collection information on #IoT device labels: https://t.co/b84Y9TtOQ4