[messaging] Fingerprint usability study (experiment design)

[Michael Rogers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 20/06/14 00:22, David Leon Gil wrote:
> E.g., (a non-MT) experiment might be: Subject is told that the
> study is about the user interface for playing some game* via
> ChatSecure; will play 10 games. As part of instructions, are told
> to verify fingerprint for games; if fingerprint doesn't verify,
> won't be able to play. Do a few sessions, presenting valid
> fingerprints; then present invalid fingerprint (before, e.g.,
> session 5).
> 
> The idea is to make verifying the fingerprint purely instrumental,
> as it is in real life, and an invalid fingerprint an obstacle.

But in real life, you can proceed if the fingerprint's invalid - you
just get owned. If we stop the test subject from proceeding when the
fingerprint's invalid, I'm not sure we're reproducing the real life
incentive to "just hit OK so I can get on with what I'm doing".

Perhaps we should instruct the subject to check the fingerprint, but
let them proceed regardless of whether they actually check it. That
seems fairly close to what we're asking people to do in real life. :-/

Cheers,
Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJTo/Z9AAoJEBEET9GfxSfM9YYH/2eze1UrxcbhgkN0wyqm6uVc
iwuU4wINZHUnRqJex3jvOMN9qNuxwjAiI7kY6k98n8t0G0SpbFofz/itiJiL8mmx
3KVb7nHC/u88aGsR6U38AwpSAd9yiAzA8um1S9UfTw4V7ez/DhP9HHMSH9i88rM7
QiG83WFxwzP5Hf2Ay+5M1TdKGLP4K30XJg5lbwcO7CHXU2jtoNIJQHZOqH2qf80o
Ehn5ypA0Q2Qqjt4skj/QBloQ/VmsbyR3QgIPznSb4oiwDHb+hHQu/4MmHzBfHu2K
LGIOCcKtrvObYxrATXaOdw7TzHilyITdERJZkKn9hAGWGHpfhSKbdLpUTbfukPo=
=oSYD
-----END PGP SIGNATURE-----