Scratchable Devices: User-Friendly Programming for Household Appliances. - Jordan T. Ash; Monica Babes; Gal Cohen; Sameen Jalal; Sam Lichtenberg; Michael L. Littman; Vukosi Marivate; Phillip Quiza; Blase Ur; Emily Zhang (HCI (3), 2011)

Tag, you can see it!: using tags for access control in photo sharing. - Peter F. Klemperer; Yuan Liang; Michelle L. Mazurek; Manya Sleeper; Blase Ur; Lujo Bauer; Lorrie Faith Cranor; Nitin Gupta 001; Michael K. Reiter (CHI, 2012)

Why Johnny can't opt out: a usability evaluation of tools to limit online behavioral advertising. - Pedro Giovanni Leon; Blase Ur; Richard Shay; Yang Wang 005; Rebecca Balebako; Lorrie Faith Cranor (CHI, 2012)

Online social networks in a post-Soviet state: how Hungarians protect and share on Facebook. - Blase Ur; Yang Wang 005 (iConference, 2012)

Correct horse battery staple: exploring the usability of system-assigned passphrases. - Richard Shay; Patrick Gage Kelley; Saranga Komanduri; Michelle L. Mazurek; Blase Ur; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (SOUPS, 2012)

Smart, useful, scary, creepy: perceptions of online behavioral advertising. - Blase Ur; Pedro Giovanni Leon; Lorrie Faith Cranor; Richard Shay; Yang Wang 005 (SOUPS, 2012)

How Does Your Password Measure Up? The Effect of Strength Meters on Password Creation. - Blase Ur; Patrick Gage Kelley; Saranga Komanduri; Joel Lee; Michael Maass; Michelle L. Mazurek; Timothy Passaro; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (USENIX Security Symposium, 2012)

What do online behavioral advertising privacy disclosures communicate to users? - Pedro Giovanni Leon; Justin Cranshaw; Lorrie Faith Cranor; Jim Graves; Manoj Hastak; Blase Ur; Guzi Xu (WPES, 2012)

Helping Users Create Better Passwords. - Blase Ur; Patrick Gage Kelley; Saranga Komanduri; Joel Lee; Michael Maass; Michelle L. Mazurek; Timothy Passaro; Richard Shay; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; et al. (login Usenix Mag., 2012)

Measuring password guessability for an entire university. - Michelle L. Mazurek; Saranga Komanduri; Timothy Vidas; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Patrick Gage Kelley; Richard Shay; Blase Ur (CCS, 2013)

"i read my Twitter the next morning and was astonished": a conversational perspective on Twitter regrets. - Manya Sleeper; Justin Cranshaw; Patrick Gage Kelley; Blase Ur; Alessandro Acquisti; Lorrie Faith Cranor; Norman M. Sadeh (CHI, 2013)

What matters to users?: factors that affect users' willingness to share information with online advertisers. - Pedro Giovanni Leon; Blase Ur; Yang Wang 005; Manya Sleeper; Rebecca Balebako; Richard Shay; Lujo Bauer; Mihai Christodorescu; Lorrie Faith Cranor (SOUPS, 2013)

The post anachronism: the temporal dimension of facebook privacy. - Lujo Bauer; Lorrie Faith Cranor; Saranga Komanduri; Michelle L. Mazurek; Michael K. Reiter; Manya Sleeper; Blase Ur (WPES, 2013)

A cross-cultural framework for protecting user privacy in online social media. - Blase Ur; Yang Wang 005 (WWW (Companion Volume), 2013)

Can long passwords be secure and usable? - Richard Shay; Saranga Komanduri; Adam L. Durity; Phillip (Seyoung) Huh; Michelle L. Mazurek; Sean M. Segreti; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (CHI, 2014)

Practical trigger-action programming in the smart home. - Blase Ur; Elyse McManus; Melwyn Pak Yong Ho; Michael L. Littman (CHI, 2014)

Intruders versus intrusiveness: teens' and parents' perspectives on home-entryway surveillance. - Blase Ur; Jaeyeon Jung; Stuart E. Schechter (UbiComp, 2014)

Parents' and Teens' Perspectives on Privacy In a Technology-Filled World. - Lorrie Faith Cranor; Adam L. Durity; Abigail Marsh; Blase Ur (SOUPS, 2014)

Supporting Privacy-Conscious App Update Decisions with User Reviews. - Yuan Tian 001; Bin Liu 017; Weisi Dai; Blase Ur; Patrick Tague; Lorrie Faith Cranor (SPSM@CCS, 2015)

A Spoonful of Sugar?: The Impact of Guidance and Feedback on Password-Creation Behavior. - Richard Shay; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Alain Forget; Saranga Komanduri; Michelle L. Mazurek; William Melicher; Sean M. Segreti; Blase Ur (CHI, 2015)

"I Added '!' at the End to Make It Secure": Observing Password Creation in the Lab. - Blase Ur; Fumiko Noma; Jonathan Bees; Sean M. Segreti; Richard Shay; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (SOUPS, 2015)

Measuring Real-World Accuracies and Biases in Modeling Password Guessability. - Blase Ur; Sean M. Segreti; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Saranga Komanduri; Darya Kurilova; Michelle L. Mazurek; William Melicher; Richard Shay (USENIX Security Symposium, 2015)

Usability and Security of Text Passwords on Mobile Devices. - William Melicher; Darya Kurilova; Sean M. Segreti; Pranshu Kalvani; Richard Shay; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Michelle L. Mazurek (CHI, 2016)

Do Users' Perceptions of Password Security Match Reality? - Blase Ur; Jonathan Bees; Sean M. Segreti; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (CHI, 2016)

Trigger-Action Programming in the Wild: An Analysis of 200, 000 IFTTT Recipes. - Blase Ur; Melwyn Pak Yong Ho; Stephen Brawner; Jiyun Lee; Sarah Mennicken; Noah Picard; Diane Schulze; Michael L. Littman (CHI, 2016)

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks. - William Melicher; Blase Ur; Sean M. Segreti; Saranga Komanduri; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (USENIX Security Symposium, 2016)

Designing Password Policies for Strength and Usability. - Richard Shay; Saranga Komanduri; Adam L. Durity; Phillip (Seyoung) Huh; Michelle L. Mazurek; Sean M. Segreti; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (ACM Trans. Inf. Syst. Secur., 2016)

Supporting Password-Security Decisions with Data. - Blase Ur (2016)

Can Unicorns Help Users Compare Crypto Key Fingerprints? - Joshua Tan; Lujo Bauer; Joseph Bonneau; Lorrie Faith Cranor; Jeremy Thomas; Blase Ur (CHI, 2017)

Design and Evaluation of a Data-Driven Password Meter. - Blase Ur; Felicia Alfieri; Maung Aung; Lujo Bauer; Nicolas Christin; Jessica Colnago; Lorrie Faith Cranor; Henry Dixon; Pardis Emami Naeini; Hana Habib; Noah Johnson; William Melicher (CHI, 2017)

Diversify to Survive: Making Passwords Stronger with Adaptive Policies. - Sean M. Segreti; William Melicher; Saranga Komanduri; Darya Melicher; Richard Shay; Blase Ur; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor; Michelle L. Mazurek (SOUPS, 2017)

Fast, Lean, and Accurate: Modeling Password Guessability Using Neural Networks. - William Melicher; Blase Ur; Saranga Komanduri; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (USENIX ATC, 2017)

SmartAuth: User-Centered Authorization for the Internet of Things. - Yuan Tian 001; Nan Zhang 018; Yue-Hsun Lin; XiaoFeng Wang 001; Blase Ur; Xianzheng Guo; Patrick Tague (USENIX Security Symposium, 2017)

Better Passwords through Science (and Neural Networks). - William Melicher; Blase Ur; Sean M. Segreti; Lujo Bauer; Nicolas Christin; Lorrie Faith Cranor (login Usenix Mag., 2017)

"What was that site doing with my Facebook password?": Designing Password-Reuse Notifications. - Maximilian Golla; Miranda Wei; Juliette Hainline; Lydia Filipe; Markus Dürmuth; Elissa M. Redmiles; Blase Ur (CCS, 2018)

Unpacking Perceptions of Data-Driven Inferences Underlying Online Targeting and Personalization. - Claire Dolin; Ben Weinshel; Shawn Shan; Chang Min Hahn; Euirim Choi; Michelle L. Mazurek; Blase Ur (CHI, 2018)

Forgotten But Not Gone: Identifying the Need for Longitudinal Data Management in Cloud Storage. - Mohammad Taha Khan; Maria Hyun; Chris Kanich; Blase Ur (CHI, 2018)

SIGCHI Outstanding Dissertation Award - Supporting Password Decisions with Data. - Blase Ur (CHI Extended Abstracts, 2018)

Draining the Data Swamp: A Similarity-based Approach. - Will Brackenbury; Rui Liu 002; Mainack Mondal; Aaron J. Elmore; Blase Ur; Kyle Chard; Michael J. Franklin (HILDA@SIGMOD, 2018)

Exploring User Mental Models of End-to-End Encrypted Communication Tools. - Ruba Abu-Salma; Elissa M. Redmiles; Blase Ur; Miranda Wei (FOCI @ USENIX Security Symposium, 2018)

Rethinking Access Control and Authentication for the Home Internet of Things (IoT). - Weijia He; Maximilian Golla; Roshni Padhi; Jordan Ofek; Markus Dürmuth; Earlence Fernandes; Blase Ur (USENIX Security Symposium, 2018)

Your Secrets Are Safe: How Browsers' Explanations Impact Misconceptions About Private Browsing Mode. - Yuxi Wu; Panya Gupta; Miranda Wei; Yasemin Acar; Sascha Fahl; Blase Ur (WWW, 2018)

Moving Beyond Set-It-And-Forget-It Privacy Settings on Social Media. - Mainack Mondal; Günce Su Yilmaz; Noah Hirsch; Mohammad Taha Khan; Michael Tang; Christopher Tran 001; Chris Kanich; Blase Ur; Elena Zheleva (CCS, 2019)

Oh, the Places You've Been! User Reactions to Longitudinal Transparency About Third-Party Web Tracking and Inferencing. - Ben Weinshel; Miranda Wei; Mainack Mondal; Euirim Choi; Shawn Shan; Claire Dolin; Michelle L. Mazurek; Blase Ur (CCS, 2019)

How Users Interpret Bugs in Trigger-Action Programming. - Will Brackenbury; Abhimanyu Deora; Jillian Ritchey; Jason Vallee; Weijia He; Guan Wang; Michael L. Littman; Blase Ur (CHI, 2019)

AutoTap: synthesizing and repairing trigger-action programs using LTL properties. - Lefan Zhang; Weijia He; Jesse J. Martinez; Noah Brackenbury; Shan Lu 001; Blase Ur (ICSE, 2019)

Evidence Humans Provide When Explaining Data-Labeling Decisions. - Judah Newman; Bowen Wang; Valerie Zhao; Amy Zeng; Michael L. Littman; Blase Ur (INTERACT (3), 2019)

When Smart Devices Are Stupid: Negative Experiences Using Home Smart Devices. - Weijia He; Jesse J. Martinez; Roshni Padhi; Lefan Zhang; Blase Ur (IEEE Symposium on Security and Privacy Workshops, 2019)

Reasoning Analytically about Password-Cracking Software. - Enze Liu 001; Amanda Nakanishi; Maximilian Golla; David Cash; Blase Ur (IEEE Symposium on Security and Privacy, 2019)

Taking Data Out of Context to Hyper-Personalize Ads: Crowdworkers' Privacy Perceptions and Decisions to Disclose Private Information. - Julia Hanson; Miranda Wei; Sophie Veys; Matthew Kugler; Lior Jacob Strahilevitz; Blase Ur (CHI, 2020)

Visualizing Differences to Improve End-User Understanding of Trigger-Action Programs. - Valerie Zhao; Lefan Zhang; Bo Wang; Shan Lu 001; Blase Ur (CHI Extended Abstracts, 2020)

An empirical study on the perceived fairness of realistic, imperfect machine learning models. - Galen Harrison; Julia Hanson; Christine Jacinto; Julio Ramirez; Blase Ur (FAT*, 2020)

What Twitter Knows: Characterizing Ad Targeting Practices, User Perceptions, and Ad Explanations Through Users' Own Twitter Data. - Miranda Wei; Madison Stamos; Sophie Veys; Nathan Reitinger; Justin Goodman; Margot Herman; Dorota Filipczuk; Ben Weinshel; Michelle L. Mazurek; Blase Ur (USENIX Security Symposium, 2020)

Trace2TAP: Synthesizing Trigger-Action Programs from Traces of Behavior. - Lefan Zhang; Weijia He; Olivia Morkved; Valerie Zhao; Michael L. Littman; Shan Lu 001; Blase Ur (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2020)

Understanding the Security and Privacy Advice Given to Black Lives Matter Protesters. - Maia J. Boyd; Jamar L. Sullivan Jr.; Marshini Chetty; Blase Ur (CHI, 2021)

Understanding Trigger-Action Programs Through Novel Visualizations of Program Differences. - Valerie Zhao; Lefan Zhang; Bo Wang; Michael L. Littman; Shan Lu 001; Blase Ur (CHI, 2021)

SoK: Context Sensing for Access Control in the Adversarial Home IoT. - Weijia He; Valerie Zhao; Olivia Morkved; Sabeeka Siddiqui; Earlence Fernandes; Josiah D. Hester; Blase Ur (EuroS&P, 2021)

Perceptions of Retrospective Edits, Changes, and Deletion on Social Media. - Günce Su Yilmaz; Fiona Gasaway; Blase Ur; Mainack Mondal (ICWSM, 2021)

Files of a Feather Flock Together? Measuring and Modeling How Users Perceive File Similarity in Cloud Storage. - Will Brackenbury; Galen Harrison; Kyle Chard; Aaron J. Elmore; Blase Ur (SIGIR, 2021)

User Perceptions of the Usability and Security of Smartphones as FIDO2 Roaming Authenticators. - Kentrell Owens; Olabode Anise; Amanda Krauss; Blase Ur (SOUPS @ USENIX Security Symposium, 2021)

On the Limited Impact of Visualizing Encryption: Perceptions of E2E Messaging Security. - Christian Stransky; Dominik Wermke; Johanna Schrader; Nicolas Huaman; Yasemin Acar; Anna Lena Fehlhaber; Miranda Wei; Blase Ur; Sascha Fahl (SOUPS @ USENIX Security Symposium, 2021)

Pursuing Usable and Useful Data Downloads Under GDPR/CCPA Access Rights via Co-Design. - Sophie Veys; Daniel Serrano; Madison Stamos; Margot Herman; Nathan Reitinger; Michelle L. Mazurek; Blase Ur (SOUPS @ USENIX Security Symposium, 2021)

KondoCloud: Improving Information Management in Cloud Storage via Recommendations Based on File Similarity. - Will Brackenbury; Andrew M. McNutt; Kyle Chard; Aaron J. Elmore; Blase Ur (UIST, 2021)

Do Users Have Contextual Preferencesfor Smartphone Power Management? - Sophie Welber; Valerie Zhao; Claire Dolin; Olivia Morkved; Henry Hoffmann; Blase Ur (UMAP, 2021)

Helping Users Automatically Find and Manage Sensitive, Expendable Files in Cloud Storage. - Mohammad Taha Khan; Christopher Tran 001; Shubham Singh; Dimitri Vasilkov; Chris Kanich; Blase Ur; Elena Zheleva (USENIX Security Symposium, 2021)

"It's Stored, Hopefully, on an Encrypted Server": Mitigating Users' Misconceptions About FIDO2 Biometric WebAuthn. - Leona Lassak; Annika Hildebrandt; Maximilian Golla; Blase Ur (USENIX Security Symposium, 2021)

From Secure to Military-Grade: Exploring the Effect of App Descriptions on User Perceptions of Secure Messaging. - Omer Akgul; Ruba Abu-Salma; Wei Bai 004; Elissa M. Redmiles; Michelle L. Mazurek; Blase Ur (WPES@CCS, 2021)

Who Am I?: A Design Probe Exploring Real-Time Transparency about Online and Offline User Profiling Underlying Targeted Ads. - Natã M. Barbosa; Gang Wang 011; Blase Ur; Yang Wang 005 (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2021)

Explaining Why: How Instructions and User Interfaces Impact Annotator Rationales When Labeling Text Data. - Jamar L. Sullivan Jr.; William Brackenbury; Andrew McNut; Kevin Bryson 002; Kwam Byll; Yuxin Chen 001; Michael L. Littman; Chenhao Tan; Blase Ur (NAACL-HLT, 2022)

Summarizing Sets of Related ML-Driven Recommendations for Improving File Management in Cloud Storage. - Will Brackenbury; Kyle Chard; Aaron J. Elmore; Blase Ur (UIST, 2022)

"The Same PIN, Just Longer": On the (In)Security of Upgrading PINs from 4 to 6 Digits. - Collins W. Munyendo; Philipp Markert; Alexandra Nisenoff; Miles Grant; Elena Korkes; Blase Ur; Adam J. Aviv (USENIX Security Symposium, 2022)

Comprehension from Chaos: What Users Understand and Expect from Private Computation. - Bailey Kacsmar; Vasisht Duddu; Kyle Tilbury; Blase Ur; Florian Kerschbaum (CoRR, 2022)

Helping Users Debug Trigger-Action Programs. - Lefan Zhang; Cyrus Zhou; Michael L. Littman; Blase Ur; Shan Lu 001 (Proc. ACM Interact. Mob. Wearable Ubiquitous Technol., 2022)

Comprehension from Chaos: Towards Informed Consent for Private Computation. - Bailey Kacsmar; Vasisht Duddu; Kyle Tilbury; Blase Ur; Florian Kerschbaum (CCS, 2023)

Defining "Broken": User Experiences and Remediation Tactics When Ad-Blocking or Tracking-Protection Tools Break a Website's User Experience. - Alexandra Nisenoff; Arthur Borem; Madison Pickering; Grant Nakanishi; Maya Thumpasery; Blase Ur (USENIX Security Symposium, 2023)

A Two-Decade Retrospective Analysis of a University's Vulnerability to Attacks Exploiting Reused Passwords. - Alexandra Nisenoff; Maximilian Golla; Miranda Wei; Juliette Hainline; Hayley Szymanek; Annika Braun; Annika Hildebrandt; Blair Christensen; David Langenberg; Blase Ur (USENIX Security Symposium, 2023)

Analysis of Google Ads Settings Over Time: Updated, Individualized, Accurate, and Filtered. - Nathan Reitinger; Bruce Wen; Michelle L. Mazurek; Blase Ur (WPES@CCS, 2023)

JupyterLab in Retrograde: Contextual Notifications That Highlight Fairness and Bias Issues for Data Scientists. - Galen Harrison; Kevin Bryson 002; Ahmad Emmanuel Balla Bamba; Luca Dovichi; Aleksander Herrmann Binion; Arthur Borem; Blase Ur (CHI, 2024)

Can Allowlists Capture the Variability of Home IoT Device Network Behavior? - Weijia He; Kevin Bryson 002; Ricardo Calderon; Vijay Prakash; Nick Feamster; Danny Yuxing Huang; Blase Ur (EuroS&P, 2024)

Data Subjects' Reactions to Exercising Their Right of Access. - Arthur Borem; Elleen Pan; Olufunmilola Obielodan; Aurelie Roubinowitz; Luca Dovichi; Michelle L. Mazurek; Blase Ur (USENIX Security Symposium, 2024)

Why Aren't We Using Passkeys? Obstacles Companies Face Deploying FIDO2 Passwordless Authentication. - Leona Lassak; Elleen Pan; Blase Ur; Maximilian Golla (USENIX Security Symposium, 2024)

What Does It Mean to Be Creepy? Responses to Visualizations of Personal Browsing Activity, Online Tracking, and Targeted Ads. - Nathan Reitinger; Bruce Wen; Michelle L. Mazurek; Blase Ur (Proc. Priv. Enhancing Technol., 2024)

How Humans Communicate Programming Tasks in Natural Language and Implications For End-User Programming with LLMs. - Madison Pickering; Helena Williams; Alison Gan; Weijia He; Hyojae Park; Francisco Piedrahita Velez; Michael L. Littman; Blase Ur (CHI, 2025)

Enabling End Users to Program Robots Using Reinforcement Learning. - Tewodros W. Ayalew; Jennifer Wang; Michael L. Littman; Blase Ur; Sarah Sebo (HRI, 2025)

Characterizing the Usability and Usefulness of U.S. Ad Transparency Systems. - Kevin Bryson 002; Arthur Borem; Phoebe Moh; Omer Akgul; Laura Edelson; Tobias Lauinger; Michelle L. Mazurek; Damon McCoy; Blase Ur (SP, 2025)