<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
h1
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        margin-top:24.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
h1.CxSpFirst
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        mso-style-type:export-only;
        margin-top:24.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
h1.CxSpMiddle
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
h1.CxSpLast
        {mso-style-priority:9;
        mso-style-link:"Heading 1 Char";
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
h2
        {mso-style-priority:9;
        mso-style-link:"Heading 2 Char";
        margin-top:10.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        font-size:13.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
h3
        {mso-style-priority:9;
        mso-style-link:"Heading 3 Char";
        margin-top:10.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        line-height:112%;
        font-size:10.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
h4
        {mso-style-priority:9;
        mso-style-link:"Heading 4 Char";
        margin-top:10.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;
        font-style:italic;}
h5
        {mso-style-priority:9;
        mso-style-link:"Heading 5 Char";
        margin-top:10.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Cambria","serif";
        color:#7F7F7F;
        font-weight:bold;}
h6
        {mso-style-priority:9;
        mso-style-link:"Heading 6 Char";
        margin:0in;
        margin-bottom:.0001pt;
        line-height:112%;
        font-size:10.0pt;
        font-family:"Cambria","serif";
        color:#7F7F7F;
        font-weight:bold;
        font-style:italic;}
p.MsoHeading7, li.MsoHeading7, div.MsoHeading7
        {mso-style-priority:9;
        mso-style-link:"Heading 7 Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Cambria","serif";
        font-style:italic;}
p.MsoHeading8, li.MsoHeading8, div.MsoHeading8
        {mso-style-priority:9;
        mso-style-link:"Heading 8 Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Cambria","serif";}
p.MsoHeading9, li.MsoHeading9, div.MsoHeading9
        {mso-style-priority:9;
        mso-style-link:"Heading 9 Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Cambria","serif";
        letter-spacing:.25pt;
        font-style:italic;}
p.MsoTitle, li.MsoTitle, div.MsoTitle
        {mso-style-priority:10;
        mso-style-link:"Title Char";
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        border:none;
        padding:0in;
        font-size:26.0pt;
        font-family:"Cambria","serif";
        letter-spacing:.25pt;}
p.MsoTitleCxSpFirst, li.MsoTitleCxSpFirst, div.MsoTitleCxSpFirst
        {mso-style-priority:10;
        mso-style-link:"Title Char";
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        border:none;
        padding:0in;
        font-size:26.0pt;
        font-family:"Cambria","serif";
        letter-spacing:.25pt;}
p.MsoTitleCxSpMiddle, li.MsoTitleCxSpMiddle, div.MsoTitleCxSpMiddle
        {mso-style-priority:10;
        mso-style-link:"Title Char";
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        border:none;
        padding:0in;
        font-size:26.0pt;
        font-family:"Cambria","serif";
        letter-spacing:.25pt;}
p.MsoTitleCxSpLast, li.MsoTitleCxSpLast, div.MsoTitleCxSpLast
        {mso-style-priority:10;
        mso-style-link:"Title Char";
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        border:none;
        padding:0in;
        font-size:26.0pt;
        font-family:"Cambria","serif";
        letter-spacing:.25pt;}
p.MsoSubtitle, li.MsoSubtitle, div.MsoSubtitle
        {mso-style-priority:11;
        mso-style-link:"Subtitle Char";
        margin-top:0in;
        margin-right:0in;
        margin-bottom:30.0pt;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Cambria","serif";
        letter-spacing:.65pt;
        font-style:italic;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
em
        {mso-style-priority:20;
        letter-spacing:.5pt;
        border:none;
        font-weight:bold;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
        {mso-style-priority:99;
        mso-style-link:"Plain Text Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:10.5pt;
        font-family:Consolas;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
p.MsoNoSpacing, li.MsoNoSpacing, div.MsoNoSpacing
        {mso-style-priority:1;
        margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
        {mso-style-priority:34;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
        {mso-style-priority:34;
        mso-style-type:export-only;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
        {mso-style-priority:34;
        mso-style-type:export-only;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
        {mso-style-priority:34;
        mso-style-type:export-only;
        margin-top:0in;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:.5in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
p.MsoQuote, li.MsoQuote, div.MsoQuote
        {mso-style-priority:29;
        mso-style-link:"Quote Char";
        margin-top:10.0pt;
        margin-right:.25in;
        margin-bottom:0in;
        margin-left:.25in;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Times New Roman","serif";
        font-style:italic;}
p.MsoIntenseQuote, li.MsoIntenseQuote, div.MsoIntenseQuote
        {mso-style-priority:30;
        mso-style-link:"Intense Quote Char";
        margin-top:10.0pt;
        margin-right:.8in;
        margin-bottom:14.0pt;
        margin-left:.7in;
        text-align:justify;
        border:none;
        padding:0in;
        font-size:10.0pt;
        font-family:"Times New Roman","serif";
        font-weight:bold;
        font-style:italic;}
span.MsoSubtleEmphasis
        {mso-style-priority:19;
        font-style:italic;}
span.MsoIntenseEmphasis
        {mso-style-priority:21;
        font-weight:bold;}
span.MsoSubtleReference
        {mso-style-priority:31;
        font-variant:small-caps;}
span.MsoIntenseReference
        {mso-style-priority:32;
        font-variant:small-caps;
        letter-spacing:.25pt;
        text-decoration:underline;}
span.MsoBookTitle
        {mso-style-priority:33;
        font-variant:small-caps;
        letter-spacing:.25pt;
        font-style:italic;}
p.MsoTocHeading, li.MsoTocHeading, div.MsoTocHeading
        {mso-style-priority:39;
        margin-top:24.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
p.MsoTocHeadingCxSpFirst, li.MsoTocHeadingCxSpFirst, div.MsoTocHeadingCxSpFirst
        {mso-style-priority:39;
        mso-style-type:export-only;
        margin-top:24.0pt;
        margin-right:0in;
        margin-bottom:0in;
        margin-left:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
p.MsoTocHeadingCxSpMiddle, li.MsoTocHeadingCxSpMiddle, div.MsoTocHeadingCxSpMiddle
        {mso-style-priority:39;
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
p.MsoTocHeadingCxSpLast, li.MsoTocHeadingCxSpLast, div.MsoTocHeadingCxSpLast
        {mso-style-priority:39;
        mso-style-type:export-only;
        margin:0in;
        margin-bottom:.0001pt;
        mso-add-space:auto;
        font-size:14.0pt;
        font-family:"Cambria","serif";
        font-weight:bold;}
span.Heading1Char
        {mso-style-name:"Heading 1 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 1";
        font-family:"Cambria","serif";
        font-weight:bold;}
span.Heading2Char
        {mso-style-name:"Heading 2 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 2";
        font-family:"Cambria","serif";
        font-weight:bold;}
span.Heading3Char
        {mso-style-name:"Heading 3 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 3";
        font-family:"Cambria","serif";
        font-weight:bold;}
span.Heading4Char
        {mso-style-name:"Heading 4 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 4";
        font-family:"Cambria","serif";
        font-weight:bold;
        font-style:italic;}
span.Heading5Char
        {mso-style-name:"Heading 5 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 5";
        font-family:"Cambria","serif";
        color:#7F7F7F;
        font-weight:bold;}
span.Heading6Char
        {mso-style-name:"Heading 6 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 6";
        font-family:"Cambria","serif";
        color:#7F7F7F;
        font-weight:bold;
        font-style:italic;}
span.Heading7Char
        {mso-style-name:"Heading 7 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 7";
        font-family:"Cambria","serif";
        font-style:italic;}
span.Heading8Char
        {mso-style-name:"Heading 8 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 8";
        font-family:"Cambria","serif";}
span.Heading9Char
        {mso-style-name:"Heading 9 Char";
        mso-style-priority:9;
        mso-style-link:"Heading 9";
        font-family:"Cambria","serif";
        letter-spacing:.25pt;
        font-style:italic;}
span.TitleChar
        {mso-style-name:"Title Char";
        mso-style-priority:10;
        mso-style-link:Title;
        font-family:"Cambria","serif";
        letter-spacing:.25pt;}
span.SubtitleChar
        {mso-style-name:"Subtitle Char";
        mso-style-priority:11;
        mso-style-link:Subtitle;
        font-family:"Cambria","serif";
        letter-spacing:.65pt;
        font-style:italic;}
span.QuoteChar
        {mso-style-name:"Quote Char";
        mso-style-priority:29;
        mso-style-link:Quote;
        font-style:italic;}
span.IntenseQuoteChar
        {mso-style-name:"Intense Quote Char";
        mso-style-priority:30;
        mso-style-link:"Intense Quote";
        font-weight:bold;
        font-style:italic;}
span.PlainTextChar
        {mso-style-name:"Plain Text Char";
        mso-style-priority:99;
        mso-style-link:"Plain Text";
        font-family:Consolas;}
span.EmailStyle47
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
span.EmailStyle48
        {mso-style-type:personal;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
span.EmailStyle49
        {mso-style-type:personal-reply;
        font-family:"Times New Roman","serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:&quot;Times New Roman&quot;,&quot;serif&quot;;color:#1F497D">The title says it all. --Azer<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:&quot;Times New Roman&quot;,&quot;serif&quot;;color:#1F497D"><o:p>&nbsp;</o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> crcs-announce-bounces@seas.harvard.edu [mailto:crcs-announce-bounces@seas.harvard.edu]
<b>On Behalf Of </b>Harlow, Carol<br>
<b>Sent:</b> Tuesday, October 09, 2012 10:29 AM<br>
<b>To:</b> crcs-announce<br>
<b>Subject:</b> [Crcs-announce] CRCS/Berkman Lunch Seminar 10/15/12<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p>CRCS/Berkman Lunch Seminar<o:p></o:p></p>
<p>Date: Monday, October 15, 2012<br>
Time: 12:00pm &#8211; 1:00pm<br>
Place: Maxwell Dworkin 119<o:p></o:p></p>
<p>Speaker:&nbsp;&nbsp; Stuart Schechter, Microsoft Research<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">Title:&nbsp;&nbsp; Yo ho, yo ho, a researcher&#8217;s life for me: Lies, thievery, and the ethics of computer security experiments.<span style="color:#1F497D"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">&nbsp;&nbsp;&nbsp;
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">Abstract:&nbsp; &nbsp;&nbsp; The study of human behavior as it relates to secure has raised numerous ethical dilemmas.&nbsp; Should researchers be allowed to analyze databases of stolen passwords
 made public through others&#8217; criminal acts?&nbsp; Should researchers who identify compromised computers by spammers allow these computers to remain compromised in order to monitor how often people buy products from spammers?&nbsp; Should researchers deceive participants
 and expose them to ruses indistinguishable from criminal attacks in order to determine how effective these attacks might be?<b><span style="color:#1F497D"><o:p></o:p></span></b></span></p>
<p>Researchers in all of the social sciences are moving into new ethical territory by running an increasingly proportion of their studies using online crowdsourcing systems, such Amazon&#8217;s Mechanical Turk.&nbsp; These studies use a model of consent and disclosure
 envisioned at a time when researchers had personal interactions with participants.&nbsp; These personal interactions not only offered participants to ask researchers to clarify the terms of a consent form or the use of deception, but they also allowed researchers
 to develop empathy for their participants and detect if a study might be causing more harm than anticipated.&nbsp; With the introduction of online crowdsourcing, researchers may be out for a game of golf when their automated web forms obtain participants&#8217; consent
 and disclose the use of deception.<o:p></o:p></p>
<p>I will present a series of experiments, in various stages of progress, to bring much-needed data to ongoing debates about research ethics.&nbsp; We augment existing deception experiments so that, shortly after participants learn that we have deceived them, we
 can ask whether these participants feel the experiment should have been allowed to proceed.&nbsp; In a second experiment, we survey prospective study participants to ask if they believe different types of studies, which we describe in more abstract terms, should
 or should not be allowed to proceed.&nbsp; In a third experiment, victims of password data breaches are asked in what situations it is appropriate for researchers or others to use their password if it has already been made public by the attacker.<o:p></o:p></p>
<p>Our preliminary results show a remarkable difference between how participants feel about deception when it is presented in abstract, and how actual study participants feel after learning they have been deceived.&nbsp; The results of our experiments also raise
 a new ethical dilemma for us, as ethics researchers.<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;">Bio:&nbsp; Stuart Schechter is a man of few accomplishments and so, the reluctant reader should be pleased to learn, his biography is correspondingly short.&nbsp; Stuart researches
 computer security, human behavior, and occasionally missteps in such distant topics as computer architecture and, now, research ethics.&nbsp; Those who have worked with Stuart rave about his &#8220;tireless efforts and disturbingly obsessive dedication&#8230; to brainstorming
 paper titles&#8221; and his knack for &#8220;carefully vetting ideas to expose every shortcoming&#8230; especially those ideas he cannot take credit for.&#8221;&nbsp;&nbsp; Institutions that may or may not be re-evaluating their admissions or hiring policies as a result of past associations
 with Stuart include The Ohio State University College of Engineering (B.S.), Harvard&#8217;s School of Engineering and Applied Sciences (Ph.D.), MIT Lincoln Laboratory (his happily-former employer), Microsoft Research (his less-fortunate current employer), and KAIST
 (to use a Facebookism, &#8220;It&#8217;s complicated&#8221;).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:&quot;Times New Roman&quot;,&quot;serif&quot;"><o:p>&nbsp;</o:p></span></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">----<o:p></o:p></p>
<p class="MsoNormal">Carol Harlow<o:p></o:p></p>
<p class="MsoNormal">Harvard University<o:p></o:p></p>
<p class="MsoNormal">Maxwell&nbsp; Dworkin 343<o:p></o:p></p>
<p class="MsoNormal">33 Oxford Street<o:p></o:p></p>
<p class="MsoNormal">Cambridge, MA&nbsp; 02138<o:p></o:p></p>
<p class="MsoNormal">617-496-1440<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
</div>
</body>
</html>