Lorrie Cranor (Lorrie Cranor), CyLab Director, enjoys the cherry blossoms in DC between sessions of the Aspen Digital US Cybersecurity Group spring meeting.

Good a time as any to revisit this study from 2008 by Lorrie Cranor and co that found that it would take 244 hours (or a month, if you spent 10 hours a day reading) to review all the privacy policies you agree to in a given year: kb.osu.edu/server/api/cor…

(6/6) The FCC order includes a list of required information that must be available through the label QR code. That list is missing critical security and privacy items. The FCC should revisit this list to ensure it includes key information.

(5/6) The FCC order mentions privacy along with security, but does not include any privacy requirements. IoT labels should include basic privacy information important to consumers such as what sensors a device has and what they do with the data they collect.

(4/6) However, our research shows that consumers want security and privacy information on product packaging, accessible without scanning. There should be an explicit requirement to include basic information on the product packaging.

(3/6) The FCC order specifies labels on IoT device packaging with QR codes and the US Cyber Trust Mark and assumes that consumers will all scan the QR codes to get more information.

(2/6) We’re concerned that the current order omits critical privacy and security information and does not do enough to address consumers’ needs. The CyLab/CR letter asks the FCC to amend the order to correct three problems:

(1/6) CyLab director Lorrie Cranor along with Yuvraj Agarwal and Omer Akgul joined forces with Consumer Reports to request amendments to the The FCC's Cybersecurity Labeling for Internet of Things Order, to be voted on by the #FCC this week: cylab.cmu.edu/_files/documen…

(2/2) Read a recent Communications of the ACM column by CyLab Director Lorrie Cranor, CMU Computer Science Department and CMU Software and Societal Systems Department faculty member Yuvraj Agarwal, and Duke CompSci's Pardis Emami-Naeini, which calls for inclusion of detailed #privacy and data collection information on #IoT device labels: cacm.acm.org/opinion/intern…

(1/2) The The FCC’s proposed Order to establish a voluntary IoT #cybersecurity labeling program calls for binary labels, but it does not specify the label format and all of the elements that should be included.

Join us Mar 4 at 4-5pm for a TCSDLS Zoom broadcast & snacks in LSRC D106 at Duke! Lorrie Faith Cranor Lorrie Cranor, CMU Prof & CyLab Director will present 'From Password Requirements to IoT Cybersecurity Labels: Informing Public Policy with Research.' bit.ly/dukecs-tcsdls-…

Do you work in security for industrial control systems? We want to hear from you! Help us design better anomaly detection systems by sharing your experience with us in a 1 hr remote interview. You'll get a $60 Amazon gift card on completion. Sign up here: forms.gle/jBjVfrsHQgLVZx…

Craig Newmark Philanthropies (craig newmark) has announced a $250,000 gift to support CyLab’s research on #privacy and #security labels for #IoT devices. Learn more below: cylab.cmu.edu/news/2023/11/0…

I've taken my bad #password dress to the next level: bad password ball gown.... lorrie.cranor.org/blog/2023/10/0…

Earlier this week, CyLab kicked off its 20th-anniversary celebration, hosting a Gala at the Heinz History Center and holding a panel discussion with past members of the institute’s leadership team during its annual Partners Conference. #20YearsOfCyLab

CyLab's 2023 Partners Conference is underway!

So proud of my PhD student -- and I didn't have anything to do with this paper as she wrote it as an undergrad at Chicago working with one of my graduated PhD students

CMU's Department of Engineering and Public Policy is looking for outstanding behavioral decision researchers with empirical, analytical, & policy interests to join our faculty, for a tenure-track position (open rank).  To learn more and apply, please visit apply.interfolio.com/130065

What are IoT security and privacy labels? And how will they help consumers make smarter purchasing decisions?
#IoT #cybersecurity
youtu.be/tcynAT1lb6A

CMU Assoc Prof Yuvraj Agarwal presented CyLab's research during the White House's launch of its new IoT cybersecurity labeling system.

CyLab has been conducting IoT security and privacy label research since 2018, working to help consumers make informed purchasing decisions.