@inproceedings{f0cad1ed69f64d008b356536e9de0a83,
title = "Johnny in Internet caf{\'e}: User study and exploration of password autocomplete in web browsers",
abstract = "One of the most popular aids adopted by users to reduce the pain suffered from the use of passwords is browsers' autocomplete feature. This feature, caching username and password after getting the user consent and using them later for automatic completion, is available in all modern browsers but communication with the user asking consent is implemented in different ways. In this paper, we report on user studies comparing active communication with a blocking dialog box and passive communication with a non-intrusive toolbar. We found that a dialog box misled users to save passwords in public computers. Conversely, no security problem was observed with passive communication. Our exploration provides empirical evidence for the risks of preferring active communication for password autocomplete and other similar interactions and sheds light on many other aspects of password autocomplete.",
keywords = "Passwords, Usable security, User study",
author = "Kemal Bicakci and Atalay, \{Nart Bedin\} and Kiziloz, \{Hakan Ezgi\}",
year = "2011",
month = oct,
day = "21",
doi = "10.1145/2046642.2046652",
language = "English",
isbn = "9781450310062",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
publisher = "Association for Computing Machinery",
pages = "33--42",
booktitle = "DIM'11 - Proceedings of the 7th ACM Workshop on Digital Identity Management",
note = "7th ACM Workshop on Digital Identity Management, DIM 2011 - Co-located with 18th ACM Conference on Computer and Communications Security, CCS 2011 ; Conference date: 21-10-2011 Through 21-10-2011",
}