Daniel Zappala
banner
zappala.bsky.social
Daniel Zappala
@zappala.bsky.social

human-centered security research at BYU

Computer science 80%
Sociology 6%
Those in California can now go here to request that data brokers delete their data: privacy.ca.gov/drop/

This is a good thing, however, it’s far from a complete solution. 🧵

1/
Delete request and opt-out platform (DROP)
Protect your personal information. Data brokers collect, share, and sell your personal information. You can stop that from happening.
privacy.ca.gov

Very disappointing loss for my team 😢
The ACM Digital Library, where a LOT of computing-related research is published (I'd say at least 75% of my own publications), is now not only providing (without consent of the authors and without opt-in by readers) AI-generated summaries of papers, but they appear as the *default* over abstracts.

I was struck by how white nationalism is woven throughout this document. It is the motivating ideology behind the strategy’s antipathy toward Europe and the desire to assert dominance in our hemisphere.

I also wonder if there is a realistic way for them to document a research process so we can see that their own work led directly to the written words, though this seems onerous.

I’m pondering a requirement that when they turn in a report, they also turn in a handwritten paragraph that copies out verbatim the AI policy for the class, with a signature attesting they followed it.

I am sad that the tech industry took no thought or care for the havoc they would wreak before unleashing this tool, nor taken any steps to curb academic misconduct.

Very considerate!

I’m curious what you do with a turkey done that early?

Reposted by Daniel Zappala

🚀💫 I’m on the job market for academic (tenure-track) and industry research positions!

👋I am a Postdoc Fellow at @hcii.cmu.edu working at the intersection of human-AI interaction, cognitive science, responsible AI, design, and social computing. I earned my PhD from @gtresearch.bsky.social in 2024.

Love to see this. I set up a recurring monthly donation to my food bank.
Donated in memory of my immigrant grandmothers and their foundational belief that food == love
I just donated to my local food bank. If you can, you should too. People are already suffering but next month, in particular, is going to be so difficult.

Reposted by Daniel Zappala

Donated in memory of my immigrant grandmothers and their foundational belief that food == love
I just donated to my local food bank. If you can, you should too. People are already suffering but next month, in particular, is going to be so difficult.
Life situations are bleak right now for a lot of people. In tech, the "Venn Diagram" of (1) positive work and (2) making enough money to support your family is increasingly non-overlapping. We all do what we can.
This image has been living in my mind rent-free for months.

Coded with an LLM

(this works for both systems and qualitative researchers)
In honor of spooky month, share a 4 word horror story that only someone in your profession would understand

I'll go first: Six page commercial lease.
In honor of spooky month, share a 4 word horror story that only someone in your profession would understand

I'll go first: Six page commercial lease.

I was up there this summer and it was gorgeous. Utah is pretty good right now too.

Curious how you secure your e-bike while running errands

This paper measured propaganda accounts and was at USENIX Security. Much more of a quantitative approach. But I get 💕 for a good qualitative paper.

www.usenix.org/conference/u...
Characterizing and Detecting Propaganda-Spreading Accounts on Telegram | USENIX
www.usenix.org

You see significant overlap and PCs in human-centered security among the above and SOUPS. For CHI, the security and privacy subcommittee in particular.

Since it’s participatory maybe CSCW but I’m less familiar with it.

You could make an argument that propaganda campaigns fit under the security umbrella. And USENIX Security has a good set of reviewers that understand and accept qualitative work. Same with IEEE S&P. CCS is a work in progress.

Alternatively maybe CHI, but the registration deadline just passed.

Reposted by Daniel Zappala

It will be my second year co-chairing the Privacy and Security subcommittee at #CHI2026, with the awesome Florian Schaub and Emilee Rader. Abstract submission is today, and we are very excited to review the list of papers that you'll send our way...
Reminder🔉 Abstract/metadata deadline is today (Sep 4 AoE)! No new submissions and author changes after the deadline. Make sure metadata is finalized before time runs out!

Reposted by Daniel Zappala

I have thoughts. Firstly, Bunch is absolutely right about this. I say this as someone who has worked for corporate media and small media. This is spot on:

Reposted by Daniel Zappala

HD Moore @hdm.io · Aug 10
Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at hdm.io/decks/MOORE%...

This deck includes some lightly-censored zero-day (more decks @ hdm.io)

Why is it a useful learning activity for a student to correct an AI system? Isn’t this more valuable for those training the AI than for the student? This seems to complicate learning more than to improve it.
"For example, a student could be asked to compare an AI-generated summary of an academic article with the original text, assessing what the AI engine gets right, what it gets wrong, and whether the article’s most important contributions have been recognized." (see next post)

Reposted by Daniel Zappala

"For example, a student could be asked to compare an AI-generated summary of an academic article with the original text, assessing what the AI engine gets right, what it gets wrong, and whether the article’s most important contributions have been recognized." (see next post)

Reposted by Daniel Zappala

Look at what happens to male teacher salaries (blue line) v.s. female teacher salaries (red line) after collective bargaining laws expire.

Reposted by Daniel Zappala

I'm in a phenomenal talk on gender inequality in cybersecurity this morrning and this is such a great cheat sheet for intersectional fair employment.

Oh that’s an interesting form of quality control. Are you using a local instance? I would worry that, even if the venue doesn’t prohibit its use, I would be feeding training data to the LLM without the authors’ consent.

Can you share how you use an LLM to help you with your reviews? Maybe you can convince me that I should try.