Volume 2026

Issue 1

• Editors' Introduction
  Gunes Acar (Radboud University), Rob Jansen (U.S. Naval Research Laboratory)
• Gaze3P: Gaze-Based Prediction of User-Perceived Privacy [PDF] Artifact: Available
  Mayar Elfares (University of Stuttgart, Germany), Pascal Reisert (University of Stuttgart, Germany), Ralf Küsters (University of Stuttgart, Germany), Andreas Bulling (University of Stuttgart, Germany)
• PriVA-C: Defending Voice Assistants from Fingerprinting Attacks [PDF] Artifact: Available
  Dilawer Ahmed (North Carolina State University), Aafaq Sabir (North Carolina State University), Ahsan Zafar (North Carolina State University), Anupam Das (North Carolina State University)
• ``We Need a Standard'': Toward an Expert–Informed Privacy Label for Differential Privacy [PDF]
  Onyinye Dibia (University of Vermont), Mengyi Lu (University of Vermont), Prianka Bhattacharjee (University of Vermont), Joseph Near (University of Vermont), Yuanyuan Feng (University of Vermont)
• Privacy Attacks on Matrix Profiles via Reconstruction Techniques [PDF] Artifact: Available, Functional, Reproduced
  Haoying Zhang (INSA CVL, Univ. d'Orléans, Inria), Nicolas Anciaux (Inria, INSA CVL, Univ. Paris Saclay), Benjamin Nguyen (INSA CVL, Univ. d'Orléans, Inria), Fabien Girard (ENSTA), Jose Maria de Fuentes (Univ. Carlos III de Madrid), Adrien Boiret (INSA CVL, Univ. d'Orléans, Inria)
• AI-in-the-Loop: Privacy Preserving Real-Time Scam Detection and Conversational Scam-baiting by Leveraging LLMs and Federated Learning [PDF] Artifact: Available
  Ismail Hossain (University of Texas at El Paso), Sai Puppala (Southern Illinois University Carbondale), Md Jahangir Alam (University of Texas at El Paso), Sajedul Talukder (University of Texas at El Paso)
• User Perceptions and Attitudes Toward Untraceability in Messaging Platforms [PDF]
  Carla F. Griggio (Aalborg University), Boel Nelson (University of Copenhagen), Zefan Sramek (IIS Lab, The University of Tokyo), Aslan Askarov (Aarhus University)
• SPRINT: Scalable Secure & Differentially Private Inference for Transformers [PDF] Artifact: Available, Functional
  Francesco Capano (SAP SE), Jonas Böhler (SAP SE), Benjamin Weggenmann (Technische Hochschule Würzburg-Schweinfurt)
• Sanitization or Deception? Rethinking Privacy Protection in Large Language Models [PDF] Artifact: Available
  Bipin Paudel (Kansas State University), Bishwas Mandal (Kansas State University), George Amariucai (Kansas State University), Shuangqing Wei (Louisiana State University)
• Argmax and XGBoost Training over Fully Homomorphic Encryption [PDF]
  Ramy Masalha (IBM Research and University of Haifa), Adi Akavia (University of Haifa), Allon Adir (IBM Research), Ehud Aharoni (IBM Research), Eyal Kushnir (IBM Research)
• Linguistic Hooks: Investigating The Role of Language Triggers in Phishing Emails Targeting African Refugees and Students [PDF]
  Mythili Menon (Wichita State University), Nisha Vinayaga-Sureshkanth (University of Texas at San Antonio), Alec Schon (Wichita State University), Kaitlyn Hemberger (University of Kansas), Murtuza Jadliwala (University of Texas at San Antonio)
• dX-Privacy for Text and the Curse of Dimensionality [PDF] Artifact: Available, Functional
  Hassan Asghar (Macquarie University), Robin Carpentier (Macquarie University), Benjamin Zhao (Macquarie University), Dali Kaafar (Macquarie University)
• What-App? App Usage Detection Using Encrypted LTE/5G Traffic [PDF] Artifact: Available, Functional
  Jinjin Wang (University of Birmingham), Zishuai Cheng (Beijing University of Posts and Telecommunications), Mihai Ordean (University of Birmingham), Baojiang Cui (Beijing University of Posts and Telecommunications)
• QUICstep: Evaluating connection migration based QUIC censorship circumvention [PDF] Artifact: Available, Functional, Reproduced
  Seungju Lee (Princeton University), Mona Wang (Princeton University), Watson Jia (Princeton University), Qiang Wu (GFW Report), Henry Birge-Lee (Princeton University), Liang Wang (Princeton University), Prateek Mittal (Princeton University)
• Personal Data Flows and Privacy Policy Traceability in Third-party LLM Apps in the GPT Ecosystem [PDF] Artifact: Available, Functional, Reproduced
  Juan-Carlos Carrillo (VRAIN, Universitat Politècnica de València, Spain), Jose Luis Martin-Navarro (Aalto University, Finland; VRAIN, Universitat Politècnica de València, Spain), Rongjun Ma (Aalto University, Finland), Jose Such (INGENIO (CSIC-Universitat Politècnica de València), Spain)
• Bot Among Us: Exploring User Awareness and Privacy Concerns About Chatbots in Group Chats [PDF] Artifact: Available, Functional, Reproduced
  Kai-Hsiang Chou (National Taiwan University), Yi-An Wang (National Taiwan University), Chong Kai Lau (National Taiwan University), Mahmood Sharif (Tel Aviv University), Hsu-Chun Hsiao (National Taiwan University; Academia Sinica)
• How Experts Personalize Privacy & Security Advice for At-Risk Users [PDF] Artifact: Available
  Wentao Guo (University of Maryland), Alexander Yang (University of Maryland), Nathan Malkin (New Jersey Institute of Technology), Michelle Mazurek (University of Maryland)
• Location-Enhanced Information Flow for Home Automations [PDF] Artifact: Available, Functional, Reproduced
  McKenna McCall (Colorado State University), Ben Weinshel (Carnegie Mellon University), Kunlin Cai (University of California, Los Angeles), Ying Li (University of California, Los Angeles), Eric Zeng (Georgetown University), Devika Manohar (Carnegie Mellon University), Lujo Bauer (Carnegie Mellon University), Limin Jia (Carnegie Mellon University), Yuan Tian (University of California, Los Angeles)
• Are Bite-Size Data Safety Details a Healthy Diet for Android Telehealth App Users? Impacts of Privacy Nutrition Labels on Users’ Privacy Perceptions [PDF]
  Alisa Frik (International Computer Science Institute), Subham Mitra (University of California, Berkeley), Priyasha Chatterjee (Max Plank Institute for Security and Privacy), Julia Bernd (International Computer Science Institute)
• ReporTor: Facilitating User Reporting of Issues Encountered in Naturalistic Web Browsing via Tor Browser [PDF] Artifact: Available, Functional
  Nicholas Micallef (Swansea University), Cameron Cartier (Black Hills Information Security, Inc.), Kevin Gallagher (NOVA LINCS, NOVA School of Science and Technology), Lucas Zagal (University of Utah), Sameer Patil (University of Utah)
• SEED: A Minimal‑Footprint TEE Framework for Verifiable, Confidential Microservice Deployment [PDF]
  Omar Jarkas (The University of Queensland), Ryan K L Ko (The University of Queensland), Naipeng Dong (The University of Queensland), Redowan Mahmud (Curtin University)
• Ephemeral Network-Layer Fingerprinting Defenses [PDF] Artifact: Available, Functional, Reproduced
  Tobias Pulls (Karlstad University), Topi Korhonen (Independent), Ethan Witwer (Linköping University), Niklas Carlsson (Linköping University)
• Making Sense of Private Advertising: A Principled Approach to a Complex Ecosystem [PDF] Artifact: Available, Functional, Reproduced
  Kyle Hogan (Massachusetts Institute of Technology), Alishah Chator (Baruch College), Gabriel Kaptchuk (University of Maryland), Mayank Varia (Boston University), Srinivas Devadas (Massachusetts Institute of Technology)
• SilhouetteTell: Practical Video Identification Leveraging Blurred Recordings of Video Subtitles [PDF]
  Guanchong Huang (University of Oklahoma), Song Fang (University of Oklahoma)
• Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing [PDF] Artifact: Available
  Shun Takagi (LY Corporation), Satoshi Hasegawa (LY Corporation)
• Word-level Annotation of GDPR Transparency Compliance in Privacy Policies using Large Language Models [PDF] Artifact: Available
  Thomas Cory (Technische Universität Berlin), Wolf Rieder (Technische Universität Berlin), Julia Krämer (Erasmus University Rotterdam), Philip Raschke (Technische Universität Berlin), Patrick Herbke (Technische Universität Berlin), Axel Küpper (Technische Universität Berlin)
• Privacy vs. Profit: The Impact of Google's Manifest Version 3 (MV3) Update on Ad Blocker Effectiveness [PDF] Artifact: Available, Functional, Reproduced
  Karlo Lukic (Goethe University Frankfurt), Lazaros Papadopoulos (Goethe University Frankfurt)
• How We Define Privacy Literacy: Teaching Experiences & Challenges of Community-Engaged Privacy Educators [PDF]
  Tanisha Afnan (University of Michigan), Sheza Naveed (University of Michigan), Griffin Christie (University of Michigan), Jackie Hu (University of Michigan), Byron M. Lowens (Indiana University at Indianapolis), Allison McDonald (Boston University), Florian Schaub (University of Michigan)
• Are we collaborative yet? A Usability Perspective on Mixnet Latency for Real-Time Applications [PDF] Artifact: Available, Functional
  Killian Davitt (King's College London), Dan Ristea (UCL), Steven J. Murdoch (UCL)
• Obscura: Enabling Ephemeral Proxies for Traffic Encapsulation in WebRTC Media Streams Against Cost-Effective Censors [PDF] Artifact: Available, Functional
  Afonso Vilalonga (Universidade NOVA de Lisboa & NOVA LINCS), Kevin Gallagher (Universidade NOVA de Lisboa & NOVA LINCS), João S. Resende (INESCTEC, Universidade do Porto), Henrique Domingos (Universidade NOVA de Lisboa & NOVA LINCS)
• Ad Personalization and Transparency in Mobile Ecosystems: A Comparative Analysis of Google's and Apple's EU App Stores [PDF] Artifact: Available, Functional, Reproduced
  David Breuer (TU Darmstadt), Lucas Becker (TU Darmstadt), Matthias Hollick (TU Darmstadt)

Issue 2

• Editors' Introduction
  Gunes Acar (Radboud University), Rob Jansen (U.S. Naval Research Laboratory)
• Breaking BAD? Better Call SAUL! - Breaking and Fixing Bloom Filters with Added Diffusion [PDF] Artifact: Available
  Frederik Armknecht (University of Mannheim), Jochen Schäfer (University of Mannheim)
• Frequency Estimation of Correlated Multi-attribute Data under Local Differential Privacy [PDF] Artifact: Available, Functional, Reproduced
  Shafizur Rahman Seeam (Rochester Institute of Technology), Ye Zheng (Rochester Institute of Technology), Yidan Hu (Rochester Institute of Technology)
• Multi-Party Private Join [PDF] Artifact: Available, Functional, Reproduced
  Anja Lehmann (Hasso Plattner Institute, University of Potsdam), Christian Mouchet (Hasso Plattner Institute, University of Potsdam), Andrey Sidorenko (Hasso Plattner Institute, University of Potsdam)
• HyperVerITAS: Verifying Image Transformations at Scale on Boolean Hypercubes [PDF] Artifact: Available, Functional
  Garrett Greiner (University of Utah), Toshi Mowery (University of Notre Dame), Pratik Soni (University of Utah)
• GAN-Invert: Unveiling Vulnerabilities in Privacy-Preserving Facial Transformations [PDF]
  Umesh Kashyap (Indian Institute of Technology Bhilai), Sk. Subidh Ali (Indian Institute of Technology Bhilai)
• Clicking into Exposure: Uncovering Privacy Risks of Google Click Identifier in YouTube Ads [PDF] Artifact: Available, Functional, Reproduced
  Ha Dao (Max Planck Institute for Informatics), Abhishek Shinde (Saarland University), Sana Athar (Max Planck Institute for Informatics), Devashish Gosain (Indian Institute of Technology Bombay)
• The Empire Strikes Back (at Your Privacy): An Archaeology of Tracking on Government Websites [PDF] Artifact: Available, Functional
  Sachin Kumar Singh (University of Utah), Faisal Mahmud (New York University Abu Dhabi), Robert Ricci (University of Utah), Sandra Siby (New York University Abu Dhabi)
• Secure Change-Point Detection for Time Series under Homomorphic Encryption [PDF] Artifact: Available, Functional, Reproduced
  Federico Mazzone (University of Twente), Giorgio Micali (University of Twente), Massimiliano Pronesti (IBM Research Europe)
• SentinelTouch: A Lightweight Privacy-Preserving Biometric-Fingerprinting Authentication and Identification System Based on Neural Networks and Homomorphic Encryption [PDF] Artifact: Available, Functional, Reproduced
  Nges Brian Njungle (STAM Center, Arizona State University), Eric Jahns (STAM Center, Arizona State University), Mishel Jyothis Paul (STAM Center, Arizona State University), Michel A Kinsy (STAM Center, Arizona State University)
• Poisoning-based Link Inference Attacks Against Federated Graph Neural Networks [PDF]
  Guizhen Yang (Deakin University), Yanjun Zhang (University of Technology Sydney), Leo Yu Zhang (Griffith University), Mengmeng Ge (Monash University), Shang Gao (Deakin University)
• ``I Just Press Allow'': Understanding Privacy Practices of New Internet Users in Urban India [PDF] Artifact: Available
  Priyanka Popuri (BITS Pilani, Hyderabad), Srishti Sanghi (The University of Sydney), Sri Lekha Mondreti (BITS Pilani, Hyderabad), Dipanjan Chakraborty (BITS Pilani, Hyderabad)
• Gryphes: Hybrid Proofs for Modular SNARKs with Applications to zkRollups [PDF] Artifact: Available, Functional, Reproduced
  Jiajun Xin (Hong Kong University of Science and Technology), Samuel Cheung On Tin (Hong Kong University of Science and Technology), Christodoulos Pappas (Hong Kong University of Science and Technology), Yongjin Huang (OKG), Dimitrios Papadopoulos (Hong Kong University of Science and Technology)
• Pirouette: Query Efficient Single-Server PIR [PDF]
  Jiayi Kang (COSIC, KU Leuven), Leonard Schild (COSIC, KU Leuven)
• A Risk Assessment Framework for Digital Identification Systems [PDF]
  Allison Woodruff (Google), Dirk Balfanz (Google), Will Drewry (Google), Mariana Raykova (Google)
• CURE: Privacy-Preserving Split Learning Done Right [PDF] Artifact: Available, Functional
  Halil Ibrahim Kanpak (Koç University), Aqsa Shabbir (Bilkent University), Esra Genç (Bilkent University), Alptekin Küpçü (Koç University), Sinem Sav (Bilkent University)
• Analysis and Attacks on the Reputation System of Nym [PDF] Artifact: Available, Functional, Reproduced
  Xinmu Alexis Cao (Johns Hopkins University), Matthew Green (Johns Hopkins University)
• Privacy by Voice: Designing Usable Privacy Notices for the Voice Interface [PDF] Artifact: Available
  Aafaq Sabir (North Carolina State University), Abhinaya S.B. (North Carolina State University), Dilawer Ahmed (North Carolina State University), Anupam Das (North Carolina State University)
• Unveiling Graph Copycats: Inference Attacks with Student Models [PDF]
  Paul Agbaje (University of Texas at Arlington), Afia Anjum (University of Texas at Arlington), Arkajyoti Mitra (University of Texas at Arlington), Habeeb Olufowobi (University of Texas at Arlington)
• Humanitarian Aid Distribution with Privacy-Preserving Assessment Capabilities [PDF] Artifact: Available, Functional, Reproduced
  Christian Knabenhans (EPFL), Lucy Qin (Georgetown University), Justinas Sukaitis (International Committee of the Red Cross), Vincent Graf Narbel (International Committee of the Red Cross), Carmela Troncoso (EPFL, MPI-SP)
• tigro: Trust Infrastructure for Grassroots Organizing via Grounded Digital Annotations [PDF] Artifact: Available
  Leah Namisa Rosenbloom (Northeastern University), Seny Kamara (Brown University and MongoDB Research), Zachary Espiritu (MongoDB Research), Tarik Moataz (MongoDB Research), Amine Bahi (École Normale Supérieure), John Wilkinson (Brown University)
• Pantomime: Motion Data Anonymization Using Foundation Motion Models [PDF] Artifact: Available
  Simon Hanisch (Technical University Dresden), Julian Todt (Karlsruhe Institute of Technology), Thorsten Strufe (Karlsruhe Institute of Technology)
• Analyzing Societal Awareness and Perception of Digital Fingerprinting and Fingerprinting Countermeasures [PDF] Artifact: Available, Functional
  Pascal Schramm (Technical University of Munich), Emmanuel Syrmoudis (Technical University of Munich), Alexandros Markou (Technical University of Munich), Jens Grossklags (Technical University of Munich)
• Website fingerprinting on Nym: Attacks and Defenses [PDF] Artifact: Available, Functional, Reproduced
  Eric Jollès (EPFL), Simon Wicky (Nym Technologies), Ania M. Piotrowska (Nym Technologies), Harry Halpin (Nym Technologies), Carmela Troncoso (MPI-SP & EPFL)
• Cryptographically-Secured Domain Validation [PDF] Artifact: Available, Functional, Reproduced
  Grace Cimaszewski (Princeton University), Henry Birge-Lee (Princeton University), Cyrill Krähenbühl (Princeton University), Liang Wang (Princeton University), Aaron Gable (Let's Encrypt), Prateek Mittal (Princeton University)
• Dropout-Robust Mechanisms for Differentially Private and Fully Decentralized Mean Estimation [PDF]
  César Sabater (CNRS, INSA Lyon), Sonia Ben Mokhtar (CNRS, INSA Lyon), Jan Ramon (INRIA Lille)
• ROTL: Faster Lookup Table Evaluation [PDF]
  Xiaoyang Hou (The State Key Laboratory of Blockchain and Data Security, Zhejiang University.), Jian Liu (The State Key Laboratory of Blockchain and Data Security, Zhejiang University; Hangzhou High-Tech Zone (Binjiang) Blockchain and Data Security Research Institute.), Jingyu Li (The State Key Laboratory of Blockchain and Data Security, Zhejiang University.), Jiawen Zhang (The State Key Laboratory of Blockchain and Data Security, Zhejiang University.), Kui Ren (The State Key Laboratory of Blockchain and Data Security, Zhejiang University; Hangzhou High-Tech Zone (Binjiang) Blockchain and Data Security Research Institute.), Chun Chen (The State Key Laboratory of Blockchain and Data Security, Zhejiang University; Hangzhou High-Tech Zone (Binjiang) Blockchain and Data Security Research Institute.)
• A Year Under the DSA: Ad Transparency's Uneven Landscape [PDF]
  Abir Benzaamia (LIX, CNRS, Inria, École Polytechnique, IP Paris), Asmaa El Fraihi (LIX, CNRS, Inria, École Polytechnique, IP Paris), Ines Abdelaziz (LIX, CNRS, Inria, École Polytechnique, IP Paris), Oana Goga (LIX, CNRS, Inria, École Polytechnique, IP Paris)
• “I don’t think it needs to be political”: Privacy Experiences and Concerns of FemHealth App Users in the United States [PDF]
  Ina Kaleva (King's College London), Alisa Frik (International Computer Science Institute), Lisa Malki (University College London), Mark Warner (University College London), Ruba Abu-Salma (King's College London)
• CoinJoin ecosystem insights for Wasabi 1.x, Wasabi 2.x and Whirlpool coordinator-based privacy mixers [PDF] Artifact: Available, Functional, Reproduced
  Petr Svenda (Masaryk University), Jiri Gavenda (Masaryk University), Vasilios Mavroudis (The Alan Turing Institute), Chris Hicks (The Alan Turing Institute)
• Privacy Bias in Language Models: A Contextual Integrity-based Auditing Metric [PDF] Artifact: Available, Functional, Reproduced
  Yan Shvartzshnaider (York University), Vasisht Duddu (Waterloo University)
• Preserving Target Distributions With Differentially Private Count Mechanisms [PDF] Artifact: Available, Functional, Reproduced
  Nitin Kohli (UC Berkeley Center for Effective Global Action), Paul Laskowski (UC Berkeley School of Information)
• PROVGEN: A Privacy-Preserving Approach for Outcome Validation in Genomic Research [PDF] Artifact: Available, Functional
  Yuzhou Jiang (Case Western Reserve University), Tianxi Ji (Texas Tech University), Erman Ayday (Case Western Reserve University)
• Exercising the CCPA Opt-out Right on Android: Legally Mandated but Practically Challenging [PDF] Artifact: Available, Functional
  Sebastian Zimmeck (Wesleyan University), Nishant Aggarwal (Wesleyan University), Zachary Liu (Wesleyan University), Sage Altman (Wesleyan University), Konrad Kollnig (Maastricht University)
• SoK: Can Fully Homomorphic Encryption Support General AI Computation? A Functional and Cost Analysis [PDF] Artifact: Available, Functional
  Jiaqi Xue (University of Central Florida), Xin Xin (University of Central Florida), Wei Zhang (University of Central Florida), Mengxin Zheng (University of Central Florida), Qianqian Song (University of Florida), Minxuan Zhou (Illinois Institute of Technology), Yushun Dong (Florida State University), Dongjie Wang (The University of Kansas), Xun Chen (Samsung Research America), Jiafeng Xie (Villanova University), Liqiang Wang (University of Central Florida), David Mohaisen (University of Central Florida), Hongyi Wu (University of Arizona), Qian Lou (University of Central Florida)

Issue 3

• Editors' Introduction
  Gunes Acar (Radboud University), Rob Jansen (U.S. Naval Research Laboratory)
• The TCF doesn’t really A(A)ID – Automatic Privacy Analysis and Legal Compliance of TCF-based Android Applications [PDF]
  Victor Morel (Chalmers University of Technology and University of Gothenburg), Cristiana Santos (Utrecht University), Pontus Carlsson (Chalmers University of Technology and University of Gothenburg), Joel Ahlinder (Chalmers University of Technology and University of Gothenburg), Romaric Duvignau (Chalmers University of Technology and University of Gothenburg)
• Access Granted, Privacy Lost: Formalizing & Quantifying the Hidden Anonymity Risks of Exclusive-Use Systems [PDF] Artifact: Available, Functional, Reproduced
  Christopher Ellis (The Ohio State University), Zhiqiang Lin (The Ohio State University)
• VeriDP: Verifiable Differentially Private Training [PDF]
  Behzad Abdolmaleki (University of Sheffield), Amir R. Asadi (University of Cambridge), Vahid R. Asadi (University of Waterloo), Stefan Köpsell (Barkhausen Institut), Bhavish Mohee (University of Sheffield), Nahid Roustaeifar (University of Sheffield), Maryam Zarezadeh (Barkhausen Institut)
• Between a Rock and a Hard Place: Examining Public Understanding and Perceptions of Data Practices in Smart Cities [PDF]
  Wejdan Alsarih (University of Bristol), Inah Omoronyia (University of Bristol), Kopo M. Ramokapane (University of Bristol)
• Dodge: A Client-Side Framework for Application-Layer Video Fingerprinting Defenses [PDF] Artifact: Available
  Ethan Witwer (Linköping University), David Hasselquist (Linköping University, Sectra Communications), Tobias Pulls (Karlstad University), Niklas Carlsson (Linköping University)
• Automated Privacy Risk Estimation of Limited Fixed Aggregate Statistics [PDF]
  Yifeng Mao (Imperial College London), Bozhidar Stevanoski (Imperial College London), Yves-Alexandre de Montjoye (Imperial College London)
• TraCS: Trajectory Collection in Continuous Space under Local Differential Privacy [PDF] Artifact: Available, Functional
  Ye Zheng (Rochester Institute of Technology), Yidan Hu (Rochester Institute of Technology)
• DP-Hype: Federated Differentially Private Hyperparameter Search [PDF] Artifact: Available, Functional, Reproduced
  Johannes Liebenow (University of Lübeck), Thorsten Peinemann (University of Lübeck), Esfandiar Mohammadi (University of Lübeck)
• Dynamic Probabilistic Noise Injection for Membership Inference Defense [PDF] Artifact: Available, Functional, Reproduced
  Javad Forough (Imperial College London), Hamed Haddadi (Imperial College London)
• AudAgent: Automated Auditing of Privacy Policy Compliance in AI Agents [PDF] Artifact: Available, Functional
  Ye Zheng (Rochester Institute of Technology), Yimin Chen (University of Massachusetts Lowell), Yidan Hu (Rochester Institute of Technology)
• Banned Books: Analysis of Censorship on Amazon.com [PDF] Artifact: Available
  Jeffrey Knockel (Bowdoin College / Citizen Lab), Jakub Dałek (Citizen Lab, University of Toronto), Noura Aljizawi (Citizen Lab, University of Toronto), Mohamed Ahmed (Citizen Lab, University of Toronto), Levi Meletti (Citizen Lab, University of Toronto), Justin Lau (Citizen Lab, University of Toronto)
• KeyDroid: A Large-Scale Analysis of Secure Key Storage in Android Apps [PDF]
  Jenny Blessing (University of Cambridge), Ross Anderson (University of Cambridge, University of Edinburgh), Alastair Beresford (University of Cambridge)
• Practical Semi-Open Chat Groups for Secure Messaging Applications [PDF] Artifact: Available, Functional, Reproduced
  Alex Davidson (LASIGE, Faculdade de Ciências, Universidade de Lisboa), Luiza Soezima (Aarhus University), Fernando Virdia (University of Surrey)
• Chatbot Confessions:~Large-Scale Analysis of Private Data Disclosure in Shared AI Chatbot Conversations [PDF] Artifact: Available, Functional
  Majid Mollaeefar (Center for Cybersecurity, Fondazione Bruno Kessler (FBK)), Dimitri Van Landuyt (LIRIS, Faculty of Economics (FEB), KU Leuven), Gertjan Franken (DistriNet, KU Leuven), Nico Ebert (ZHAW, School of Management and Law), Silvio Ranise (Center for Cybersecurity, Fondazione Bruno Kessler (FBK))
• EXADPrinter: Semi-Exhaustive Permissionless Device Fingerprinting Within the Android Ecosystem [PDF] Artifact: Available, Functional
  Sihem Bouhenniche (Univ. Lille, CNRS, Inria), Pierre Laperdrix (Univ. Lille, CNRS, Inria), Walter Rudametkin (Univ. Rennes, CNRS, Inria, IRISA, IUF)
• Gradient-Free Privacy Leakage in Federated Language Models through Selective Weight Tampering [PDF]
  Md Rafi Ur Rashid (Pennsylvania State University), Vishnu Asutosh Dasu (Pennsylvania State University), Kang Gu (Dartmouth College), Najrin Sultana (Pennsylvania State University), Shagufta Mehnaz (Pennsylvania State University)
• SoK: Multi-Perspective-Video-Anonymization [PDF]
  Islam Amar (Karlsruhe Institute of Technology, Germany), Omar Moured (Karlsruhe Institute of Technology, Germany), Simon Hanisch (Karlsruhe Institute of Technology, Germany), Thorsten Strufe (Karlsruhe Institute of Technology, Germany)
• Understanding Privacy and Quality Tradeoffs in Synthetic Network Data [PDF] Artifact: Available
  Andrew Chu (University of Chicago), Kyle MacMillan (University of Chicago), Paul Schmitt (California Polytechnic State University), Nick Feamster (University of Chicago)
• zkRevoke: Configurable Untraceability for Verifiable Credentials using ZKPs [PDF] Artifact: Available, Functional, Reproduced
  Praveensankar Manimaran (University of Oslo, Norway), Mayank Raikwar (University of Oslo, Norway), Thiago Garrett (University of Oslo, Norway), Arlindo F. da Conceição (Federal University of São Paulo, Brazil), Leander Jehl (University of Stavanger, Norway), Roman Vitenberg (University of Oslo, Norway)
• Personalizing Agent Privacy Decisions via Logical Entailment [PDF]
  James Flemings (University of Southern California), Ren Yi (Google), Octavian Suciu (Google), Kassem Fawaz (University of Wisconsin - Madison), Murali Annavaram (University of Southern California), Maro Gruteser (Google)
• When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generation [PDF] Artifact: Available
  Joshua Ward (University of California Los Angeles), Bochau Gu (University of California Los Angeles), Chi-Hua Wang (University of California Los Angeles), Guang Cheng (University of California Los Angeles)
• From Lines of Code to Lines of Policy? Exploring Software Developers’ Perceptions of Their Privacy Policy–Related Activities [PDF]
  Ria Prianka Saha (Technical University of Darmstadt), Daniel Stäcker (Technical University of Darmstadt), Jonas Stromberg (Fraunhofer IGD), Steven Lamarr Reynolds (Fraunhofer IGD), Kilian Demuth (Technical University of Darmstadt), Frank Nelles (Technical University of Darmstadt), Christian Reuter (Technical University of Darmstadt), Jörn Kohlhammer (Fraunhofer IGD), Alexander Benlian (Technical University of Darmstadt)
• Operationalizing the Motivated Intruder: A Codebook-Guided Inference Framework for Semantic Input Privacy in LLMs [PDF]
  Michael Maximilian Grötzner (FernUniversität in Hagen), Pascal Tippe (FernUniversität in Hagen)
• Privacy in Theory, Bugs in Practice: Grey-Box Auditing of Differential Privacy Libraries [PDF] Artifact: Available, Functional, Reproduced
  Tudor Cebere (PreMeDICaL team, Inria, Idesp, Inserm, Université de Montpellier), David Erb (Technical University of Munich & Oblivious), Damien Desfontaines (Hiding Nemo), Aurélien Bellet (PreMeDICaL team, Inria, Idesp, Inserm, Université de Montpellier), Jack Fitzsimons (Oblivious)
• Contextual Intent: Activists' Privacy Considerations for Collaborative Technology in U.S. Social Movement Groups [PDF]
  Alexandria LeClerc (Oregon State University), Glencora Borradaile (Oregon State University), Kelsy Kretschmer (Oregon State University)
• Toward Transparent IoT Purchases: Understanding User Preferences for Privacy and Security Properties of IoT Devices [PDF]
  Lindrit Kqiku (University of Göttingen), Delphine Reinhardt (University of Göttingen)
• The Masks We (Think We) Wear: Privacy Threats of Browser-Extension Wallets in the Web3 Ecosystem [PDF] Artifact: Available, Functional, Reproduced
  Weihong Wang (DistriNet, KU Leuven), Yana Dimova (DistriNet, KU Leuven), Victor Vansteenkiste (DistriNet, KU Leuven), Tom Van Goethem (DistriNet, KU Leuven), Tom Van Cutsem (DistriNet, KU Leuven)
• Precarious But Active: A Look At Privacy Behaviors in Chinese Transformative Fandom on a Censored and Surveilled Internet [PDF]
  Kelly Wang (Northeastern University), Ruochen Liu (Northeastern University), Ada Lerner (Northeastern University), Abigail Marsh (Macalester College), Tianshi Li (Northeastern University)
• CensorLess: Cost-Efficient Censorship Circumvention Through Serverless Cloud Functions [PDF] Artifact: Available, Functional
  Dayeon Kang (University of Massachusetts Amherst), Jade Sheffey (University of Massachusetts Amherst), Mingshi Wu (GFW Report), Pubali Datta (University of Massachusetts Amherst), Amir Houmansadr (University of Massachusetts Amherst)
• Weight initialization based on gradient similarity for versatile machine unlearning [PDF] Artifact: Available
  Doun Lee (Kookmin University), Jongyun Shin (Kookmin University), Jinwoo Bae (Kookmin University), Hyunjoon Cho (Kookmin University), Jangho Kim (Kookmin University)
• OAuthHub: Mitigating OAuth Data Overaccess through a Local Data Hub [PDF] Artifact: Available, Functional
  Qiyu Li (University of California San Diego), Yuhe Tian (University of California San Diego), Haojian Jin (University of California San Diego)
• Secure and Privacy-Preserving Vertical Federated Learning [PDF]
  Shan Jin (Visa Research), Sai Rahul Rachuri (Visa Research), Yizhen Wang (Visa Research), Anderson C.A. Nascimento (Visa Research), Yiwei Cai (Visa Research)
• Statistics-Friendly Confidentiality Protection for Establishment Data, with Applications to the QCEW [PDF]
  Kaitlyn Webb (Pennsylvania State University), Prottay Protivash (Pennsylvania State University), John Durrell (Pennsylvania State University), Aleksandra Slavkovic (Pennsylvania State University), Daniel Kifer (Pennsylvania State University), Daniell Toth (National Institute of Statistical Sciences)
• Redefining Website Fingerprinting Attacks with Multi-Agent LLMs [PDF] Artifact: Available
  Chuxu Song (Rutgers University), Dheekshith Dev Manohar Mekala (Rutgers University), Hao Wang (Rutgers University), Richard Martin (Rutgers University)
• An Improved Entropy Measure for Web Browser Fingerprinting Risk [PDF] Artifact: Available, Functional, Reproduced
  Alex Berke (Google), Enrico Bacis (Google), Umar Syed (Google)
• Quantifying Classifier Utility under Local Differential Privacy [PDF] Artifact: Available, Functional, Reproduced
  Ye Zheng (Rochester Institute of Technology), Yidan Hu (Rochester Institute of Technology)
• Oblivis: A Framework for Delegated and Efficient Oblivious Transfer [PDF]
  Aydin Abadi (Newcastle University), Yvo Desmedt (The University of Texas at Dallas)
• Revisiting the LiRA Membership Inference Attack Under Realistic Assumptions [PDF] Artifact: Available, Functional, Reproduced
  Najeeb Jebreel (Universitat Rovira i Virgili), Mona Khalil (Universitat Rovira i Virgili), David Sánchez (Universitat Rovira i Virgili), Josep Domingo-Ferrer (Universitat Rovira i Virgili)
• Pseudonymity at Risk: Linkage Attacks on Blockchain Users with Off-Chain Cues [PDF] Artifact: Available
  Alexander Smirnov (TU Berlin), Stefan Schmid (TU Berlin and Weizenbaum Institute), Friedhelm Victor (TRM Labs)

Issue 4

• Editors' Introduction [PDF]
  Gunes Acar (Radboud University), Rob Jansen (U.S. Naval Research Laboratory)
• “The city isn’t uploading me to TikTok”: Exploring Privacy Attitudes towards Data Collection in Urban Public Spaces [PDF]
  Julian Todt (Karlsruhe Institute of Technology), Emiram Kablo (Paderborn University), Felix Morsbach (Karlsruhe Institute of Technology), Patricia Arias-Cabarcos (European Commission, Joint Research Centre (JRC)), Thorsten Strufe (Karlsruhe Institute of Technology)
• More Space, Less Privacy? Measuring the Effectiveness of IP-based Website Fingerprinting in IPv6 [PDF] Artifact: Available, Functional, Reproduced
  Sumeer Ahmad (Stony Brook University), Michalis Polychronakis (Stony Brook University), Theophilus A. Benson (Carnegie Mellon University), Nguyen Phong Hoang (University of British Columbia)
• Where to Intervene? Benchmarking Fairness-Aware Learning on Differentially Private Synthetic Tabular Data [PDF] Artifact: Available, Functional, Reproduced
  Vinicius Gabriel Angelozzi Verona de Resende (Centre Inria de l'Université Grenoble Alpes), Héber Hwang Arcolezi (ÉTS Montréal)
• LendLocked: Privacy & Transparency for Digital Library Lending [PDF] Artifact: Available, Functional, Reproduced
  Boya Wang (MPI-SP & EPFL), Peter Hall (New York University), Sunoo Park (New York University)
• Dead Domains, Living Data: A Privacy Risk Analysis of Domain Lifecycle in Android Apps [PDF]
  Gabriel Hortea (Universidad Carlos III de Madrid), Aniketh Girish (IMDEA Networks Institute), Narseo Vallina-Rodriguez (IMDEA Networks Institute), Juan Tapiador (Universidad Carlos III de Madrid)
• SoK: Offline Finding Protocols for Lightweight Location Tracking [PDF] Artifact: Available
  Akshaya Kumar (Georgia Institute of Technology), Carolina Ortega Pérez (Cornell University), Joseph Jaeger (Georgia Institute of Technology), Thomas Ristenpart (University of Toronto), Michael Specter (Georgia Institute of Technology)
• When Threshold Meets Anamorphic Signatures: What is Possible and What is Not! [PDF]
  Hien Chu (TU Wien), Khue Do (CISPA Helmholtz Center for Information Security), Lucjan Hanzlik (CISPA Helmholtz Center for Information Security), Sri AravindaKrishnan Thyagarajan (University of Sydney)
• Measuring Legislature-Aligned Privacy Risks in Synthetic Graphs [PDF] Artifact: Available, Functional, Reproduced
  Abele Mălan (University of Neuchâtel), Ahmad Al Kurdi (RPTU University Kaiserslautern-Landau), Stefanie Roos (RPTU University Kaiserslautern-Landau), Lydia Chen (University of Neuchâtel; Delft University of Technology)
• Di5Guise: 5G Privacy with vSIM [PDF] Artifact: Available
  Shirin Ebadi (University of Colorado Boulder), Zach Moolman (University of Colorado Boulder), Tamara Lehman (University of Colorado Boulder), Eric Keller (University of Colorado Boulder)
• Disclosure Divergence: Measuring Privacy Policy and Data Safety Misalignment at Scale [PDF] Artifact: Available, Functional, Reproduced
  Mst Eshita Khatun (Louisiana State University), Lamine Noureddine (Louisiana State University), Sideeq Bello (Louisiana State University), Aisha Ali-Gombe (Louisiana State University)
• P-Box: Preventing Unwanted Data Flows using Permission Sandboxes on Android [PDF] Artifact: Available, Functional, Reproduced
  Lucas Becker (TU Darmstadt), David Breuer (TU Darmstadt), Matthias Hollick (TU Darmstadt)
• SoK: Verifiable Integrity Claims for Privacy-Preserving Federated Learning [PDF] Artifact: Available
  Andrea Rizzini (Politecnico di Milano, Horizen Labs), Marco Esposito (Politecnico di Milano), Tommaso Gagliardoni (Horizen Labs), Francesco Bruschi (Politecnico di Milano)
• Breaking and (Partially) Fixing Onion Routing with Fragmentation [PDF] Artifact: Available, Functional, Reproduced
  Daniel Schadt (Karlsruhe Institute of Technology), Christoph Coijanovic (Karlsruhe Institute of Technology), Thorsten Strufe (Karlsruhe Institute of Technology)
• When Drones Meet Privately: Secure Coordination with t-PSI [PDF] Artifact: Available, Functional, Reproduced
  Matteo Cornacchia (Sapienza University of Rome), Riccardo Lazzeretti (Sapienza University of Rome), Giulio Rigoni (Sapienza University of Rome), Leonardo Ventura (Sapienza University of Rome)
• From Syntactic Matching to Taint Tracking and Back: A Comparative Study of Web Tracking Detection Techniques [PDF] Artifact: Available, Functional, Reproduced
  Stefano Calzavara (Università Ca' Foscari Venezia), Samuele Casarin (Università Ca' Foscari Venezia and Scuola IMT Alti Studi Lucca), Marco Squarcina (TU Wien), Matteo Maffei (TU Wien)
• The Role of Online Forums in Developer Understanding of Privacy Law - A Reddit Case Study [PDF] Artifact: Available
  Sara Haghighi (University of Maine), Clark LaChance (University of Maine), Ali Pourghasemi Fatideh (University of Maine), Travis Breaux (Carnegie Mellon University), Sepideh Ghanavati (University of Maine)
• Sensor Privacy as a Spectrum: Quantifying Privacy in Edge and Multimodal Systems through Games [PDF]
  Jainta Paul (University of Utah), Miles Bovero (University of Utah), Swapnil Saha (STMicroelectronics Inc.), Mahesh Chowdhary (STMicroelectronics Inc.), Pratik Soni (University of Utah), Luis Garcia (University of Utah)
• Panoptes: Detecting Out-of-Sight Privacy Exposure in Android [PDF]
  Sajjad Pourali (Concordia University), Mohammad Mannan (Concordia University)
• Training TFHE-Based Neural Networks with Approximated Floating-Point Arithmetic [PDF] Artifact: Available, Functional
  Emanuele Nicoletti (Politecnico di Milano), Fabrizio Pittorino (Politecnico di Milano), Alessandro Falcetta (Politecnico di Milano), Luca Colombo (Politecnico di Milano), Manuel Roveri (Politecnico di Milano)
• CAnonize: A Compact Anonymous Survey Protocol [PDF] Artifact: Available, Functional, Reproduced
  Marie Lonfils (UCLouvain), Olivier Pereira (UCLouvain), Thomas Peters (UCLouvain), Moti Yung (Google LLC, Columbia University)
• SoK: Metric Differential Privacy in Theory and Practice [PDF]
  Xinpeng Xie (University of North Texas), Chenyang Yu (University of North Texas), Yan Huang (University of North Texas), Yang Cao (Institute of Science Tokyo), Chenxi Qiu (University of North Texas)
• More Modalities, More Problems: Examining User Understanding of The Meta Quest Permissions Framework [PDF]
  Sarah Radway (Harvard University), Matthew Soto (Carnegie Mellon University), Suvi Lama (Massachusetts Institute of Technology), Carson Powers (Tufts University), Daniel Votipka (Tufts University)
• SoK: Mapping the Privacy Landscape of Geolocation Ecosystems [PDF]
  Augustin Laouar (ENS de Lyon, CNRS, UCBL1, LIP), Paul Lachat (Inria, INSA-Lyon, Univ. of Lyon, CITI Lab), Loïc Desgeorges (ENS de Lyon, CNRS, UCBL1, LIP), Mathieu Cunche (Inria, INSA-Lyon, Univ. of Lyon, CITI Lab), Vincent Roca (Inria), Pascale Vicat-Blanc (Inria), Francesco Bronzino (ENS de Lyon, CNRS, UCBL1, LIP, Institut Universitaire de France)
• Poison to Detect: Detection of Targeted Overfitting in Federated Learning [PDF] Artifact: Available
  Soumia Zohra El Mestari (University of Luxembourg), Maciej Krzysztof Zuziak (University of Leeds), Gabriele Lenzini (University of Luxembourg)
• Cultivating a Tech-Safety Mindset using Game-Based Learning for Defending against Technology-Facilitated Abuse [PDF] Artifact: Available
  Majed Almansoori (University of Wisconsin--Madison and United Arab Emirates University (UAEU)), Chirag Ghosh (Indian Institute of Technology, Kharagpur), Sarita Singh (Indian Institute of Technology, Kharagpur), Rahul Chatterjee (University of Wisconsin--Madison), Mainack Mondal (Indian Institute of Technology, Kharagpur)
• FHEON: A Configurable Framework for Developing Privacy-Preserving Encrypted Neural Networks [PDF] Artifact: Available, Functional, Reproduced
  Nges Brian Njungle (STAM Center, Arizona State University), Eric Jahns (STAM Center, Arizona State University), Michel A. Kinsy (STAM Center, Arizona State University)
• Revisiting Assumptions for Membership Inference on Summary Statistics [PDF] Artifact: Available, Functional, Reproduced
  Pascal Berrang (University of Birmingham), Mark Ryan (University of Birmingham), Kiera Wooldridge (University of Birmingham)
• Privacy Pass is Anamorphic: Practical Consequences and Attacks in the Black-box Model [PDF]
  Mirosław Kutyłowski (NASK National Research Institute), Oliwer Sobolewski (NASK National Research Institute)
• FinP: Fairness-in-Privacy in Federated Learning by Addressing Disparities in Privacy Risk [PDF] Artifact: Available, Functional, Reproduced
  Tianyu Zhao (University of California, Irvine), Mahmoud Srewa (University of California, Irvine), Salma Elmalaki (University of California, Irvine)
• CODoH: Privacy-Preserving Caching for Oblivious DNS over HTTPS [PDF] Artifact: Available, Functional
  Pankaj Niroula (William & Mary), Lily Gloudemans (William & Mary), Aashutosh Poudel (William & Mary), Collin MacDonald (William & Mary), Stephen Herwig (William & Mary)
• Impact of Graph Structure on Membership-Inference Risk for Graph Neural Networks [PDF] Artifact: Available, Functional, Reproduced
  Megha Khosla (Delft University of Technology)
• LLMs Leak Training Data Beyond Verbatim Memorization: Extraction via Membership Decoding [PDF]
  Zitai Chen (National University of Singapore), Reza Shokri (National University of Singapore)
• WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks [PDF] Artifact: Available, Functional
  Guruprasad Viswanathan Ramesh (University of Wisconsin-Madison), Asmit Nayak (University of Wisconsin-Madison), Basieem Siddique (University of Wisconsin-Madison), Kassem Fawaz (University of Wisconsin-Madison)
• Overcoming Language Barriers: Multilingual Analysis of the 2023 Swiss Privacy Law’s Impact [PDF] Artifact: Available
  Luka Nenadic (ETH Zurich), David Rodriguez (Information Processing and Telecommunications Center, Universidad Politécnica de Madrid, ETSI Telecomunicación), Joseph A. Calandrino (Carnegie Mellon University)
• "Alexa, Do Not Say That in Front of my Boss!" A Cross-Cultural Comparison of User and AI Preferences for Privacy-Aware Smart Speaker Interactions Across Contexts [PDF]
  Lynne Warin (University of Göttingen), Tony Tang (Singapore Management University), Emily Aurelia (Singapore Management University), Archan Misra (Singapore Management University), Delphine Reinhardt (University of Göttingen)
• Zero-Knowledge Proofs of Generalized Regular Expression Matching for Anonymized Email Verification [PDF] Artifact: Available
  Shreyas Londhe (ZK Email), Aayush Gupta (ZK Email), Sora Suegami (Ethereum Foundation), Yogesh Shahi (ZK Email), Rute Fgueiredo (ZK Email), Parisa Hassanizadeh (IPPT PAN / Zero Savvy), Shahriar Ebrahimi (The Alan Turing Institute / Zero Savvy)
• No Privacy for Privates: How Military Communities Experience and Perceive the Privacy Risks of Military-Marketed Mobile Apps [PDF] Artifact: Available
  Joshua Shinkle (Purdue University), Chandrika Mukherjee (Purdue University), Abdullah Imran (Purdue University), Arjun Arunasalam (Florida International University), Donna Artusy (Army Cyber Institute), Antonio Bianchi (Purdue University), Z. Berkay Celik (Purdue University), Alexander Master (United States Military Academy)
• CoP: Coordinated Perturbation for Controlled Disclosure Under Local Differential Privacy [PDF] Artifact: Available, Functional
  Sandaru Jayawardana (The University of Sydney, Australia), Ming Ding (Technology, CSIRO, Australia), Kanchana Thilakarathna (The University of Sydney, Australia)
• Designing Reflective Thinking-Based Contextual Privacy Policy for Mobile Applications [PDF] Artifact: Available
  Shuning Zhang (Tsinghua University), Sixing Tao (University of Washington), Eve He (University of Wisconsin-Madison), Yuting Yang (University of Michigan), Ying Ma (The University of Melbourne), Ailei Wang (Tsinghua University), Xin Yi (Tsinghua University and Beijing Academy of Artificial Intelligence), Hewu Li (Tsinghua University)
• Enabling Personal Dataflow Sovereignty via Bolt-on Data Escrow [PDF] Artifact: Available
  Zhiru Zhu (The University of Chicago), Raul Castro Fernandez (The University of Chicago)
• ``Users are worried, but we are confused'': Exploring the Privacy, Security, and Safety Perspectives and Practices of FemHealth App Product Team Members [PDF]
  Chenkai Ma (King's College London), Shijing He (King's College London), Ina Kaleva (King's College London), Alisa Frik (International Computer Science Institute), Jose Such (INGENIO (CSIC-Universitat Politècnica de València)), Ruba Abu-Salma (King's College London)
• POPPY: Scalable and Secure Spectral Centrality for Distributed Graphs via Homomorphic Encryption [PDF] Artifact: Available, Functional, Reproduced
  Claire Guichemerre (Université de Rennes, CNRS, Irisa), Tristan Allard (Université de Rennes, CNRS, Irisa), Sofiane Azogagh (Université du Québec à Montréal), Marc-Olivier Killijian (Université du Québec à Montréal), Sébastien Gambs (Université du Québec à Montréal), Amr El Abbadi (University of California Santa Barbara)
• Proteus: A Practical Framework for Privacy-Preserving Device Logs [PDF]
  Sanket Goutam (Stony Brook University), Hunter Kippen (Samsung Research America), Michael Grace (Unaffiliated), Amir Rahmati (Stony Brook University)
• ``Because I didn't touch these and even don't know why I should to change these'': Why App Developers Do (Not) Update Apple’s Privacy Labels [PDF] Artifact: Available
  Arwa Alsahdi (The George Washington University), Jialiang Yan (The George Washington University), Monica Kodwani (The George Washington University), Matthias Fassl (The George Washington University), Chris Kanich (University of Illinois Chicago), Adam J. Aviv (The George Washington University)
• On the Suitability of LLM-Driven Agents for Dark Pattern Audits [PDF] Artifact: Available, Functional
  Chen Sun (University of Iowa), Yash Vekaria (University of California, Davis), Rishab Nithyanand (University of Iowa)
• EvaluatAR: A Cross-Device Evaluation Framework for Rapid Prototyping of Bystander PETs in AR [PDF] Artifact: Available, Functional
  Syed Ibrahim Mustafa Shah Bukhari (Virginia Tech), Matthew Corbett (Army Cyber Institute at West Point), Bo Ji (Virginia Tech), Brendan David-John (Virginia Tech)
• Troll Patrol: Anonymous User Reporting of Bridge Censorship [PDF] Artifact: Available, Functional, Reproduced
  Vecna (University of Waterloo), Ian Goldberg (University of Waterloo)
• Beyond the Output: Inference Attacks on Private Set Union and Multi-Key Private Matching [PDF] Artifact: Available, Functional, Reproduced
  Andrea Raguso (ETH Zürich), Francesca Falzon (ETH Zürich), Tianxin Tang (University of Glasgow), Kenneth G. Paterson (ETH Zürich)
• Maude-HCS: Model Checking the Undetectability-Performance Tradeoffs of Hidden Communication Systems [PDF] Artifact: Available, Functional, Reproduced
  Joud Khoury (RTX BBN Technologies), Minyoung Kim (SRI International), Christophe Merlin (RTX BBN Technologies), José Meseguer (U. of Illinois at Urbana-Champaign), Zachary Ratliff (Harvard University), Carolyn Talcott (SRI International)
• Waterfall: A Capsule-Based Framework for Evaluating Traffic Watermarking in Anonymity Systems [PDF] Artifact: Available
  Dimitri Mankowski (Ruhr University Bochum), Eduard Marin (Telefonica Research), Nuno Santos (INESC-ID / IST, University of Lisbon), Veelasha Moonsamy (Ruhr University Bochum)
• Precision Leads Recalling You! Improved Location Privacy for Shared Mobility Services [PDF]
  Debasree Das (University of Bamberg, Germany), Daniela Nicklas (University of Bamberg, Germany)
• Understanding How University Guidelines Address Privacy and Security Issues of Generative AI in Academic Settings [PDF]
  Bei Yi Ng (University of Edinburgh), Jiarui Li (University of Edinburgh), Xinyuan Tong (University of Edinburgh), Kevin Ye (University of Illinois Urbana–Champaign), Gauthami Yenne (University of Illinois Urbana–Champaign), Varun Chandrasekaran (University of Illinois Urbana–Champaign), Jingjie Li (University of Edinburgh)
• Toward Adaptive Privacy-Enhancing Training: A Longitudinal Study of How Personality Shapes Responsiveness to Information Security Awareness Training [PDF]
  Ofir Cohen (Ben-Gurion University of the Negev), Asaf Shabtai (Ben-Gurion University of the Negev), Rami Puzis (Ben-Gurion University of the Negev)
• RingOA: Fast Oblivious Access for Large-Scale Privacy-Preserving Structured Data Analysis [PDF] Artifact: Available, Functional
  Tomoki Uchiyama (Waseda University), Kana Shimizu (Waseda University)
• Priv360: Application-Oriented QoE-Optimized Client-Side Protection for 360-Viewer Identification [PDF] Artifact: Available
  Sheyda Mirzakhani (Linköping University), Niklas Carlsson (Linköping University)
• The PET Paradox: How Amazon Instrumentalises PETs in Sidewalk to Entrench Its Infrastructural Power [PDF]
  Thijmen van Gend (Netherlands Organisation for Applied Scientific Research (TNO) & Delft University of Technology), Donald Jay Bertulfo (Delft University of Technology), Seda Gürses (Delft University of Technology)
• PQKryvos: Post-Quantum Secure E-Voting With Flexible Ballot Formats and Public Tally-Hiding [PDF] Artifact: Available, Functional, Reproduced
  Nicolas Huber (Institute of Information Security, University of Stuttgart, Germany), Ralf Küsters (Institute of Information Security, University of Stuttgart, Germany), Pascal Reisert (Institute of Information Security, University of Stuttgart, Germany)