Tools for Achieving Usable Ex Post Transparency: A Survey <s> 2) COMPUTER <s> A number of mobile applications have emerged that allow users to locate one another. However, people have expressed concerns about the privacy implications associated with this class of software, suggesting that broad adoption may only happen to the extent that these concerns are adequately addressed. In this article, we report on our work on PeopleFinder, an application that enables cell phone and laptop users to selectively share their locations with others (e.g. friends, family, and colleagues). The objective of our work has been to better understand people's attitudes and behaviors towards privacy as they interact with such an application, and to explore technologies that empower users to more effectively and efficiently specify their privacy preferences (or "policies"). These technologies include user interfaces for specifying rules and auditing disclosures, as well as machine learning techniques to refine user policies based on their feedback. We present evaluations of these technologies in the context of one laboratory study and three field studies. <s> BIB001 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 2) COMPUTER <s> Studies have shown that users have great difficulty specifying their security and privacy policies in a variety of application domains. While machine learning techniques have successfully been used to refine models of user preferences, such as in recommender systems, they are generally configured as "black boxes" that take control over the entire policy and severely restrict the ways in which the user can manipulate it. This article presents an alternative approach, referred to as user-controllable policy learning. It involves the incremental manipulation of policies in a context where system and user refine a common policy model. The user regularly provides feedback on decisions made based on the current policy. This feedback is used to identify (learn) incremental policy improvements which are presented as suggestions to the user. The user, in turn, can review these suggestions and decide which, if any, to accept. The incremental nature of the suggestions enhances usability, and because the user and the system manipulate a common policy representation, the user retains control and can still make policy modifications by hand. Results obtained using a neighborhood search implementation of this approach are presented in the context of data derived from the deployment of a friend finder application, where users can share their locations with others, subject to privacy policies they refine over time. We present results showing policy accuracy, which averages 60% upon initial definition by our users climbing as high as 90% using our technique. <s> BIB002 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 2) COMPUTER <s> This paper provides a short survey on transparency tools for privacy purposes. It defines the term transparency tools, argues why they are important and gives examples for transparency tools. A classification of transparency tools is suggested and some example tools are analyzed with the help of the classification. <s> BIB003 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 2) COMPUTER <s> Today's rich service offer in the World Wide Web increasingly requires the disclosure of personal user data. Service providers' appetite for personal user data, however, is accompanied by growing privacy implications for Internet users. Addressing this rising threat, privacy-enhancing technologies aim at aiding users in protecting their personal data. Even though effective privacy laws facilitate users to edit and revoke already disclosed personal data, few PET solutions support users in exercising this right. Available tools lack intuitive interfaces and are built on powerful infrastructures on the provider side. In this paper we introduce the Data Disclosure Log component within a user-centric privacy architecture. Built on a browser-based logging extension, we present a visualization tool that displays past personal data disclosures from different perspectives. A graph-based view allows for the dynamic presentation of relations between selected entity types. Such an overview enables users to know the conditions of past personal data transactions at any time. This knowledge represents a prerequisite for an ex post revision or revocation of personal data. Usability and user acceptance of the developed prototype is evaluated in a conducted user test. <s> BIB004 </s> Tools for Achieving Usable Ex Post Transparency: A Survey <s> 2) COMPUTER <s> We present a prototype of the user interface of a transparency tool that displays an overview of a user's data disclosures to different online service providers and allows them to access data collected about them stored at the services' sides. We explore one particular type of visualization method consisting of tracing lines that connect a user's disclosed personal attributes to the service to which these attributes have been disclosed. We report on the ongoing iterative process of design of such visualization, the challenges encountered and the possibilities for future improvements. <s> BIB005
Computer refers to computer terminals with dedicated keyboards and screen diagonals of 12 inches or larger, such as desktops or laptops. Many computers feature additional HCI peripherals that facilitate interaction with screen-based applications. Unlike handheld devices, computers are particularly suited for long-term interaction with information systems. The TETs presented by Hsieh et al.  and Sadeh et al. BIB001 are implemented as client-side notification applications for Microsoft Windows. The client-side component of the 'PeopleFinder' location-sharing platform employed by Kelley et al. BIB002 and Sadeh et al. BIB001 runs on Windows mobile cell phones, as well as 'PC and Apple laptops' BIB001 . The latest stand-alone version of 'Data Track' presented by Karegar et al.  , which provides transparency for exported data, is available as source code, as well as precompiled executables for Windows, macOS and GNU/Linux  . Conversely, the former version of Data Track, called 'GenomSynlig,' is implemented as a remote web-based service BIB005 . Respective source data can, for example, be exported using Google's Takeout service. BIB003 Kolter et al. BIB004 implemented the transaction logging and review process of their TET as a Mozilla Firefox extension and Java application, respectively. The prototype by Popescu et al.  relies on a 'browser plugin' to detect the disclosure of personal data.