Teenagers’ lack of digital sophistication makes them vulnerable to social engineering attacks. Clickbait, one of such attacks, is primarily performed through social media to trick users into clicking on malicious links. With teenagers’ increasing use of social media, clickbait poses a substantial threat to their online safety. The existing online safety measures for teens mainly focus on parental mediation, which can be perceived as restrictive. Here, researchers recommended empowering teens to deal with online risks. To that end, we conducted co-design sessions with 27 teenagers aimed at understanding their perceptions and designing countermeasures against clickbait. Our findings suggest that teenagers are vulnerable to clickbait due to relevance and peer influence, where co-design revealed interventions with unique teen perspectives through storytelling. Overall, our study provides valuable insights into understanding teenagers’ needs around clickbait and interventions against it. We offer guidelines for future research in these directions based on our findings.

Clickbait, a social engineering attack performed through social media, tricks users through sensationalized or misleading posts into clicking on links that direct them to malicious websites. With the recent boom in social media, clickbait has become a substantial security concern, necessitating efforts from platforms and academia to control it. Despite these attempts, clickbait is effective due to the lack of users’ knowledge. Therefore, we explore user mental models (thought processes about how something works) about clickbait to analyze their deficiencies and their influences on users’ behavior towards clickbait warnings. To this end, we conducted an online study with 770 participants over MTurk to generate user mental models about clickbait and to evaluate the clickbait warnings conveying harm. Our findings suggest that a large portion of users have a simple mental model that fails to comprehend the dangers of clickbait, indicating the importance of warnings in supporting and educating users. Overall, our studies provide valuable insights into understanding the impact of clickbait mental models on users’ online security behavior in social media and offer guidelines for future research in these directions.

Clickbait, masked behind interesting headlines and thumbnails, is often used to spread misinformation and trick users into clicking on social media posts or links that direct them to malicious websites. To help users protect against clickbait, we examined interventions based on persuasion theories including designs that used social consequence, personal consequence, and badges. To this end, we first conducted a preliminary study to translate the participants’ feedback into improving our initial designs, followed by a lab study with 20 participants (60% Male, 40% Female; 18–44 years old) aimed at understanding their perceptions of the improved interventions; we further updated our designs based on their feedback. We then conducted an online study with 773 participants (56% Male, 42% Female; 18 to above 65 years old) over MTurk to evaluate the impact of persuasion techniques leveraged in our designs. Our findings suggest that persuasion can be an effective strategy to warn users against clickbait, specifically ones that use incentives such as revealing mystery of clickbait. Overall, our studies provide valuable insights into understanding users’ needs and expectations around interventions against clickbait, and offer guidelines for future research in these directions.

Clickbait headlines work through superlatives and intensifiers, creating information gaps to increase the relevance of their associated links that direct users to time-wasting and sometimes even malicious websites. This approach can be amplified using targeted clickbait that takes publicly available information from social media to align clickbait to users’ preferences and beliefs. In this work, we first conducted preliminary studies to understand the influence of targeted clickbait on users’ clicking behavior. Based on our findings, we involved 24 users in the participatory design of story-based warnings against targeted clickbait. Our analysis of user-created warnings led to four design variations, which we evaluated through an online survey over Amazon Mechanical Turk. Our findings show the significance of integrating information with persuasive narratives to create effective warnings against targeted clickbait. Overall, our studies provide valuable insights into understanding users’ perceptions and behaviors towards targeted clickbait, and the efficacy of story-based interventions.

Purpose The purpose of this study is to understand user perceptions and misconceptions regarding security tools. Security and privacy-preserving tools (for brevity, the authors term them as “security tools” in this paper, unless otherwise specified) are designed to protect the security and privacy of people in the digital environment. However, inappropriate use of these tools can lead to unexpected consequences that are preventable. Hence, it is significant to examine why users do not understand the security tools. Design/methodology/approach The authors conducted a qualitative study with 40 participants in the USA to investigate the prevalent misconceptions of people regarding security tools, their perceptions of data access and the corresponding impact on their usage behavior and data protection strategies. Findings While security vulnerabilities are often rooted in people’s internet usage behavior, this study examined user’s mental models of the internet and unpacked how the misconceptions about security tools relate to those mental models. Originality/value Based on the findings, this study offers recommendations highlighting the design aspects of security tools that need careful attention from researchers and industry practitioners, to alleviate users’ misconceptions and provide them with accurate conceptual models toward the desired use of security tools.

Users share their personal devices with different entities in various circumstances. While prior research shed light on the broad reasons behind the sharing of mobile phones, there is a dearth of systematic study to understand the user's decision-making process and the underlying preferences and concerns in the context of phone sharing. To address these gaps, we designed a prototype that we leveraged to investigate the interplay between a user's relationship with sharees, preferences of sharing a subset of apps with a certain entity, perceived sensitivity of the apps being shared, and how these factors relate to their authentication behavior. We conducted a multi-session study with 50 participants from three countries (USA, Turkey, and Nepal), where the participants interacted with our prototype and took part in semi-structured interviews. The findings from our study revealed the need for phone sharing at a granular level, where we identified the factors that could influence a user's decision-making process in sharing. Our analysis unpacked the relation between a user's perceived sensitivity of apps being shared, and authentication behavior to protect information from unauthorized access. Overall, our findings advance the CSCW community's understanding of how the user attains a balance between privacy protection and the need for phone sharing.

With the growing adoption of digital technology in healthcare organizations, it is important to understand nursing professionals' behavior and challenges, and the corresponding privacy implications around digital technology use. To this end, we conducted semi-structured interviews with 21 participants (16 nursing professionals, and five nursing faculties) in the USA. In our study with nursing professionals, we explored how they used digital technology and protected sensitive health data at their workplace. We investigated their understanding of privacy breaches and possible consequences, the challenges they encountered to maintaining privacy, and their workarounds to deal with such issues. We looked into the support that professional nurses receive in the form of organizational training, and how they collaborate with the IT department at their institution to address technical issues. In addition, we shed light on the gap between their academic preparation and professional needs in the context of digital technology use and privacy protection, where we also interviewed five nursing faculties to get more in-depth understanding of this issue from the point of view of academia. Overall, our findings provide valuable insights for the CSCW community to better understand the challenges and privacy risks in digital technology use by nursing professionals, and lead to our recommendations to address these issues.