Decaying Photos for Enhanced Privacy: User Perceptions Towards Temporal Redactions and 'Trusted' Platforms
Decaying Photos for Enhanced Privacy: User Perceptions Towards Temporal Redactions and 'Trusted' Platforms
复制标题
DOI：
10.1145/3555538
复制
发表时间：
2022-11
影响因子：
--
通讯作者：
Sabid Bin Habib Pias;Imtiaz Ahmad;T. Akter;Apu Kapadia;Adam J. Lee
中科院分区：
文献类型：
--
作者：
Sabid Bin Habib Pias;Imtiaz Ahmad;T. Akter;Apu Kapadia;Adam J. Lee
随着在线社交媒体中照片共享的普及，人际侵犯了一个人侵犯了另一个人的隐私，这已成为越来越多的关注点。尽管在共享照片时应用图像混淆可能是改善隐私的有用工具，但先前的研究发现这些混淆技术会对观众的满意度产生不利影响。另一方面，由Snapchat等应用程序普及的短暂照片使观众可以看到整张照片，然后不久就会消失以保护隐私。但是，人们经常在删除之前使用解决方法来保存这些照片。在这项工作中，我们研究了人们与两个提出的“时间修订”的共享偏好，该偏好结合了杂物与修复，使观众可以看到整个图像，但通过在照片的敏感部分中逐渐或延迟应用重新应用，使这些图像可以安全地存储。我们进行了一个在线实验（n = 385），以在不同的情况下以及在观众平台提供的不同级别的保证下研究人们的共享行为（例如，确保通过使用“可信硬件”来应用时间修复）。我们的发现表明，所提出的时间修订机制通常比现有方法优先。另一方面，需要更多的努力将可信赖的硬件的好处传达给用户，因为在观众对观众的设备上对“可信硬件”的态度没有明显差异。
With the rising popularity of photo sharing in online social media, interpersonal privacy violations, where one person violates the privacy of another, have become an increasing concern. Although applying image obfuscations can be a useful tool for improving privacy when sharing photos, prior studies have found these obfuscation techniques adversely affect viewers' satisfaction. On the other hand, ephemeral photos, popularized by apps such as Snapchat, allow viewers to see the entire photo, which then disappears shortly thereafter to protect privacy. However, people often use workarounds to save these photos before deletion. In this work, we study people's sharing preferences with two proposed 'temporal redactions', which combines ephemerality with redactions to allow viewers to see the entire image, yet make these images safe for longer storage through a gradual or delayed application of redaction on the sensitive portions of the photo. We conducted an online experiment (N=385) to study people's sharing behaviors in different contexts and under different levels of assurance provided by the viewer's platform (e.g., guaranteeing temporal redactions are applied through the use of 'trusted hardware'). Our findings suggest that the proposed temporal redaction mechanisms are often preferred over existing methods. On the other hand, more efforts are needed to convey the benefits of trusted hardware to users, as no significant differences were observed in attitudes towards 'trusted hardware' on viewers' devices.