Search papers, labs, and topics across Lattice.
This study analyzes the dynamics of security and privacy discussions on social networks, specifically focusing on the "X" platform (formerly Twitter), using a graph of over 13 million users. The research reveals that discussions are predominantly confined within highly clustered communities, limiting exposure for those outside these interest bubbles. The findings highlight significant challenges in disseminating security and privacy information effectively to a broader audience, suggesting that current methods may fail to reach those who need it most.
Security and privacy discussions on social media are largely echo chambers, leaving the broader public uninformed and vulnerable.
The dissemination of security and privacy education and guidance has been and still remains a challenge today. Social networks represent a potential avenue for sharing best practices, and experimentally they have been found to be effective at this task. While this appears promising, in the real world, security and privacy discussions would need to reach a wide range of people to be effective, avoiding the"interest bubbles"that commonly occur. We sought to understand how the communities surrounding security and privacy discourse operate, with a focus on what challenges need to be overcome to enable security and privacy discourse and advice to reach a wider audience. Indeed, we found that in-the-wild security and privacy discussions in social networks portray quite a different picture than in experimental settings. We built and analyzed the structure of a graph containing over 13 million users on the"X"platform (formerly"Twitter"), including 10,159 users who posted about security and privacy and their followers. Prior work has shown that users are more likely to consider information within social media if their like-minded social ties have visibly engaged with it. Our findings indicate that the users generating or participating in security discussions largely already belong to highly clustered technology and security- and privacy-related interest communities, which suggests that the people who are not already in the"inner circle"of relevant interests are likely not exposed effectively to these discussions. We conclude with reflections and ideas on increasing the reach of security and privacy guidance in social networks.
