Augmented reality (AR) devices are poised to enter the market. It is unclear how the properties of these devices will affect individuals' privacy. In this study, we investigate the privacy perspectives of individuals when they are bystanders around AR devices. We conducted 12 field sessions in cafés and interviewed 31 bystanders regarding their reactions to a co-located AR device. Participants were predominantly split between having indifferent and negative reactions to the device. Participants who expressed that AR devices change the bystander experience attributed this difference to subtleness, ease of recording, and the technology's lack of prevalence. Additionally, participants surfaced a variety of factors that make recording more or less acceptable, including what they are doing when the recording is being taken. Participants expressed interest in being asked permission before being recorded and in recording-blocking devices. We use the interview results to guide an exploration of design directions for privacy-mediating technologies.

This is a progress report on a case study of cyber-security at mega-size companies and its importance to the financial and operational well-being of the company. Our investigation focuses specifically on Saudi Aramco, the world's largest oil company. The company was the target of a severe cyber-attack on August 15, 2012 that paralyzed their business network for several months. We analyze the company's response to the attack and examine its current policies with regard to cyber-security. Our goal is to answer the main research question: How the Saudi Government, the primary stakeholder of Saudi Aramco, reacted and responded to the attack and how this response conforms to current cyber-security standards. The objective is to develop a best-practices benchmark of cyber-security that provides guidelines to be utilized by Saudi Aramco and similar companies.