Pith. sign in

REVIEW 2 major objections 1 minor 74 references

The Role of Online Forums in Developer Understanding of Privacy Law -- A Reddit Case Study

T0 review · 2 major / 1 minor · reviewed 2026-06-30 · grok-4.3

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read Software developers consult Reddit for privacy law advice even after earning certifications, especially on data protection assessments, breach reporting, and cookie consent.

desk verdict This Reddit survey finds certified developers still hunt forums for privacy advice on DPIAs and cookie consent, but the self-selected sample from regulatory subreddits makes broad claims shaky. read the letter →

arxiv 2606.29393 v1 pith:T3Y4DZWH submitted 2026-06-28 cs.CR cs.CYcs.HCcs.SE

Sara. Haghighi , Clark LaChance , Ali Pourghasemi Fatideh , Travis Breaux , Sepideh Ghanavati This is my paper · ORCID
classification cs.CRcs.CYcs.HCcs.SE
keywords privacylawonlineforumsRedditsoftwaredevelopersdataprotectionregulatorycomplianceusersurveyscredibilityassessment
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

The paper investigates the role of online forums in how software practitioners handle privacy regulations by surveying 223 Reddit users from regulatory subreddits and analyzing 2,248 posts. It establishes that forum use remains common among certified professionals for resolving specific compliance tasks. The study details how users judge advice credibility through post history, cited sources, and recognized experts. This reveals gaps between formal training and practical regulatory needs in software development.

What carries the argument

Survey of self-selected Reddit users combined with qualitative analysis of posts in regulatory-focused subreddits, used to map advice-seeking behavior and credibility evaluation methods.

What would settle it

A follow-up study that directly observes privacy compliance decisions in real development projects and compares error rates between frequent forum users and those who rely only on official sources or training.

Watch

Extended reading notes

Core claim

Despite holding privacy-related certifications, most participants frequently use forums to seek legal advice, with key challenges in implementing a data protection impact assessment, reporting a data breach, and obtaining cookie consent; users assess credibility by reviewing respondents' post history, verifying sources, trusting recognized experts, and seeking clarification.

Load-bearing premise

The 223 survey respondents and 2,248 posts from regulatory subreddits accurately represent how software practitioners seek and apply privacy law guidance in practice.

Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit.

Referee Report

2 major / 1 minor

Summary. The paper reports findings from a survey of 223 Reddit users recruited from regulatory-focused subreddits, complemented by qualitative analysis of 2,248 posts and responses. It claims that software practitioners frequently use online forums to seek privacy law advice even when they hold relevant certifications, identifies specific challenges including implementing data protection impact assessments, reporting data breaches, and obtaining cookie consent, describes credibility assessment practices such as reviewing post history and verifying sources, and suggests research and educational directions to address gaps in regulatory compliance support.

Significance. If the reported patterns hold, the work would offer empirical insight into how developers navigate privacy regulations through informal channels, underscoring the limits of certifications alone and pointing to concrete areas where additional guidance is needed. The mixed-methods approach combining survey data with post analysis is a strength for identifying both self-reported behaviors and observable discussion themes.

major comments (2)
  1. [Methods] Methods section (implied by abstract description of survey and qualitative analysis): The manuscript provides sample sizes (223 survey respondents, 2,248 posts) but omits details on sampling method, response rate, exclusion criteria, recruitment period, and inter-coder reliability for the qualitative coding. These omissions are load-bearing because the central claims about frequency of forum use and identification of specific challenges rest on the validity and representativeness of the collected data.
  2. [Recruitment and Sampling] Recruitment description (abstract and results): Recruitment targeted regulatory-focused subreddits, which conditions the sample on pre-existing privacy interest and forum engagement. This selection effect directly affects the strongest claim that 'most participants frequently use forums to seek legal advice' and the reported challenges, as the observed patterns may not generalize to software practitioners outside these communities or indicate whether certifications reduce forum reliance in the broader population.
minor comments (1)
  1. [Abstract] Abstract: The credibility assessment practices are listed but without indication of how many participants reported each method or any quantification of their prevalence.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for their constructive feedback on our manuscript. We respond to each major comment below and will revise the paper to address the identified issues where possible.

read point-by-point responses

  1. Referee: [Methods] Methods section (implied by abstract description of survey and qualitative analysis): The manuscript provides sample sizes (223 survey respondents, 2,248 posts) but omits details on sampling method, response rate, exclusion criteria, recruitment period, and inter-coder reliability for the qualitative coding. These omissions are load-bearing because the central claims about frequency of forum use and identification of specific challenges rest on the validity and representativeness of the collected data.

    Authors: We agree that the Methods section requires expansion for transparency. In the revised manuscript we will add: the sampling approach (posts in regulatory-focused subreddits with a link to an anonymous survey), the recruitment period, explicit exclusion criteria (e.g., incomplete or duplicate responses), and a description of the qualitative coding process. For inter-coder reliability we will report the procedure used and any agreement metrics calculated. A precise response rate cannot be computed because the survey was posted publicly without individual invitation tracking; we will state this limitation explicitly and note that the sample is best understood as a convenience sample of engaged subreddit users. revision: yes

  2. Referee: [Recruitment and Sampling] Recruitment description (abstract and results): Recruitment targeted regulatory-focused subreddits, which conditions the sample on pre-existing privacy interest and forum engagement. This selection effect directly affects the strongest claim that 'most participants frequently use forums to seek legal advice' and the reported challenges, as the observed patterns may not generalize to software practitioners outside these communities or indicate whether certifications reduce forum reliance in the broader population.

    Authors: We acknowledge the selection effect and agree it constrains generalizability. The study was designed as a case study of forum users who already engage with privacy topics; the central finding is that even within this group, certifications do not eliminate reliance on forums. In revision we will (1) qualify all frequency and challenge claims to refer to this population, (2) add an explicit Limitations subsection discussing the selection bias and its implications for inferences about the broader practitioner population, and (3) temper language suggesting the results speak to whether certifications reduce forum use overall. We will not claim broader representativeness. revision: partial

Circularity Check

0 steps flagged · score 0.0 of 10

Empirical survey with no derivations, fits, or self-referential steps

full rationale

The paper is a standard empirical survey and qualitative analysis of 223 Reddit respondents and 2,248 posts. No equations, parameters, derivations, or predictions appear in the abstract or described content. Claims rest directly on reported survey responses and post coding rather than any reduction to fitted inputs or self-citation chains. The work is self-contained against its own data collection and does not invoke uniqueness theorems or ansatzes.

Assumptions & free parameters 0 free parameters · 1 assumptions · 0 invented entities

Empirical social science study relying on self-reported survey data and post content; no mathematical free parameters or invented physical entities.

assumptions (1)
  • domain assumption Self-reported survey responses from Reddit users accurately capture their professional backgrounds, behaviors, and challenges regarding privacy law compliance.
    The central claims rest on the validity of participant self-reports without mentioned external validation or behavioral logs.

how reviews work

0 comments
Cite this review

Pith. "Pith review of The Role of Online Forums in Developer Understanding of Privacy Law -- A Reddit Case Study." pith.science (2026). https://pith.science/paper/T3Y4DZWH

@misc{pith2026260629393,
  author       = {Pith},
  title        = {Pith review of: The Role of Online Forums in Developer Understanding of Privacy Law -- A Reddit Case Study},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/T3Y4DZWH}},
  note         = {Machine review of arXiv:2606.29393}
}
read the original abstract

Software practitioners use online forums to navigate complex and often ambiguous legal privacy requirements, yet little is known about their professional backgrounds, what challenges they face, and how they use and assess the credibility of the advice received, or how they resolve ambiguities in posts. We report the findings of a survey of 223 Reddit users from regulatory-focused subreddits, complemented by a qualitative analysis of 2,248 posts and responses. Our results show that, despite holding privacy-related certifications, most participants frequently use forums to seek legal advice. Key challenges reported or identified include implementing a data protection impact assessment, reporting a data breach, and obtaining cookie consent. Reddit users often assess credibility by reviewing respondents' post history, verifying sources cited, trusting advice from recognized experts, and following up for clarity before responding. We highlight research and educational directions to bridge gaps in support needed for regulatory compliance guidance.

Figures

Figures reproduced from arXiv: 2606.29393 by the authors.

Figure 1
Figure 1. The Overview of Our Study 3.1 Survey Design The survey was informed by prior research on developer privacy practices [28, 48, 57, 60], how they reason about privacy require￾ments on forums [38, 45, 49], and by informal discussions with our legal collaborators (i.e., law professors) and a privacy research professional at a major company. We iteratively piloted the sur￾vey with members of our university’s privacy rese… view at source ↗
Figure 2
Figure 2. Top Five Privacy Certifications Categories [PITH_FULL_IMAGE:figures/full_fig_p006_2.png] view at source ↗
Figure 3
Figure 3. Motivations For Interaction on Reddit We explore whether participants interact with Reddit and, if so, what the nature of their interaction is. As shown in Appendix F - [PITH_FULL_IMAGE:figures/full_fig_p007_3.png] view at source ↗
Figures from the paper (5 more)
Figure 4
Figure 4. Figure 4: Credibility Evalution Strategies profile and previous posts including replies.” 18% of them seek ex￾ternal verification including “Google and fact checking website” and “reputable news articles across vast news outlets”, while 17% look for sources/evidence through stra…
Figure 5
Figure 5. Figure 5: a and Figure 5b show the distribution of job roles and the subcategories within technical roles. (a) Distribution of the Job Roles (b) Top Four Technical Roles Subcategories [PITH_FULL_IMAGE:figures/full_fig_p016_5.png]
Figure 8
Figure 8. Figure 8: Frequency of GDPR-related Posting/Replying [PITH_FULL_IMAGE:figures/full_fig_p017_8.png]
Figure 9
Figure 9. Figure 9: Use of External Privacy or Legal Advice I Use of External Privacy or Legal Advice [PITH_FULL_IMAGE:figures/full_fig_p017_9.png]
Figure 10
Figure 10. Figure 10: Shared GDPR Challenges in Survey vs. Posts [PITH_FULL_IMAGE:figures/full_fig_p018_10.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

74 extracted references · 13 canonical work pages

  1. [1]

    Sanju Ahuja, Johanna Gunawan, Nataliia Bielova, and Cristiana Teixeira Santos

  2. [2]

    InProceedings of the 2026 CHI Conference on Human Factors in Computing Systems

    Dark Patterns and the EU Digital Services Act: Mapping Autonomy Viola- tions and Design Factors. InProceedings of the 2026 CHI Conference on Human Factors in Computing Systems. 1–30

    2026

  3. [3]

    Noura Alomar and Serge Egelman. 2022. Developers Say the Darnedest Things: Privacy Compliance Processes Followed by Developers of Child-Directed Apps. Proceedings on Privacy Enhancing Technologies(2022)

    2022

  4. [4]

    Arash Amini, Yigit Ege Bayiz, Ashwin Ram, Radu Marculescu, and Ufuk Topcu

  5. [5]

    InProceedings of the International AAAI Conference on Web and Social Media

    News Source Credibility Assessment: A Reddit Case Study. InProceedings of the International AAAI Conference on Web and Social Media. 68–82

  6. [6]

    Wilder Baldwin, Shashank Chintakuntla, Shreyah Parajuli, Ali Pourghasemi, Ryan Shanz, and Sepideh Ghanavati. 2025. Generating Privacy Stories from Software Documentation. InProceedings of the IEEE International Requirements Engineering Conference (RE). 432–440

    2025

  7. [7]

    Bryce Boe. 2026. PRAW: Python Reddit API Wrapper. https://pypi.org/project/ praw/ Accessed: May 9, 2026

    2026

  8. [8]

    Norman Breslow. 1970. A Generalized Kruskal-Wallis Test for Comparing K Samples Subject to Unequal Patterns of Censorship.Biometrika57, 3 (1970), 579–594

    1970

Show all 74 references
  1. [9]

    Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, et al

    Tom Brown, Benjamin Mann, Nick Ryder, Melanie Subbiah, Jared D. Kaplan, Prafulla Dhariwal, Arvind Neelakantan, Pranav Shyam, Girish Sastry, Amanda Askell, et al. 2020. Language Models Are Few-Shot Learners.Advances in Neural Information Processing Systems33 (2020), 1877–1901

    2020

  2. [10]

    Centre for Information Policy Leadership. 2017. Top 10 Operational Im- pacts of the GDPR: Implementation Challenges and Strategies. https: //www.informationpolicycentre.com/uploads/5/7/1/0/57104281/final_cipl_ gdpr_implementation_challenges_summary_document_27_april_2017.pdf. ...

    2017

  3. [11]

    Yung-Sheng Chang, Yan Zhang, and Jacek Gwizdka. 2021. The effects of in- formation source and eHealth literacy on consumer health information credi- bility evaluation behavior.Computers in Human Behavior115 (2021), 106629. https://doi.org/10.1016/j.chb.2020.106629

    2021 doi

  4. [12]

    Seung Youn Chyung, Katherine Roberts, Ieva Swanson, and Andrea Hankinson

  5. [13]

    Performance Improvement56, 10 (2017), 15–23

    Evidence-Based Survey Design: The Use of a Midpoint on the Likert Scale. Performance Improvement56, 10 (2017), 15–23

    2017

  6. [14]

    Jacob Cohen. 1992. Statistical Power Analysis.Current Directions in Psychological Science1, 3 (1992), 98–101

    1992

  7. [15]

    Asmita Dalela, Saverio Giallorenzo, Oksana Kulyk, Jacopo Mauro, and Elda Paja. 2021. A Mixed-Method Study on Security and Privacy Practices in Danish Companies.arXiv preprint arXiv:2104.04030(2021)

    2021

  8. [16]

    Zachary Eberhart and Collin McMillan. 2021. Dialogue Management for Interac- tive API Search. In2021 IEEE International Conference on Software Maintenance and Evolution (ICSME). IEEE, 274–285

    2021

  9. [17]

    Zachary Eberhart and Collin McMillan. 2022. Generating Clarifying Questions for Query Refinement in Source Code Search. In2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER). IEEE, 140–151

    2022

  10. [18]

    European Union. 2024. The EU General Data Protection Regulation (GDPR). http://www.eugdpr.org/. Accessed February 10, 2025

    2024

  11. [19]

    Europrivacy. 2024. EIPACC – European Information Privacy and Cybersecurity Certification. https://www.europrivacy.org/eipacc. Accessed May 22, 2025

    2024

  12. [20]

    B. J. Fogg, Cathy Soohoo, David R. Danielson, Leslie Marable, Julianne Stanford, and Ellen R. Tauber. 2003. How do users evaluate the credibility of Web sites? a study with over 2,500 participants. InProceedings of the 2003 Conference on Designing for User Experiences(San Fran...

    2003

  13. [21]

    Adrian Ford, Ameer Al-Nemrat, Seyed Ghorashi, and Julia Davidson. 2021. The Impact of Data Breach Announcements on Company Value in European Markets. InWEIS 2021: The 20th Annual Workshop on the Economics of Information Security. 1–8

    2021

  14. [22]

    Adrian Ford, Ameer Al-Nemrat, Seyed Ali Ghorashi, and Julia Davidson. 2023. The Impact of GDPR Infringement Fines on the Market Value of Firms.Information & Computer Security31, 1 (2023), 51–64

    2023

  15. [23]

    2013.Survey research methods

    Floyd J Fowler Jr. 2013.Survey research methods. Sage publications

    2013

  16. [24]

    Ron Garland et al . 1991. The Mid-Point on a Rating Scale: Is It Desirable? Marketing Bulletin2, 1 (1991), 66–70

    1991

  17. [25]

    David Gefen, Shahin Jabbari, Rezvaneh Shadi Rezapour, Aria Pessianzadeh, Kshitij Kayastha, and Hilde Van den Bulck. 2024. The Evolving Meaning of Trust and Risk in Reddit Discourse About ChatGPT.AMCIS Proceedings(2024)

    2024

  18. [26]

    1996.A Guide to Chi-Squared Testing

    Priscilla E Greenwood and Michael S Nikulin. 1996.A Guide to Chi-Squared Testing. John Wiley & Sons

    1996

  19. [27]

    Irit Hadar, Tomer Hasson, Oshrat Ayalon, Eran Toch, Michael Birnhack, Sofia Sherman, and Arod Balissa. 2018. Privacy by Designers: Software Developers’ Privacy Mindset.Journal of Empirical Software Engineering(2018)

    2018

  20. [28]

    Hamza Harkous, Sai Teja Peddinti, Rishabh Khandelwal, Animesh Srivastava, and Nina Taft. 2022. Hark: A Deep Learning System for Navigating Privacy Feedback at Scale. In2022 IEEE Symposium on Security and Privacy (SP). IEEE, 2469–2486

    2022

  21. [29]

    Charles R Henderson. 1953. Estimation of variance and covariance components. Biometrics9, 2 (1953), 226–252

    1953

  22. [30]

    Rashina Hoda. 2025. Qualitative Research with Socio-Technical Grounded Theory A Practical Guide to Qualitative Data Analysis and Theory Development in the Digital World.Innovations(2025)

    2025

  23. [31]

    Those Things are Written by Lawyers, and Programmers are Reading That

    Stefan Albert Horstmann, Samuel Domiks, Marco Gutfleisch, Mindy Tran, Yasemin Acar, Veelasha Moonsamy, and Alena Naiakshina. 2024. “Those Things are Written by Lawyers, and Programmers are Reading That. ” Mapping the Com- munication Gap Between Software Developers and Privacy ...

    2024

  24. [32]

    Sorry for Bugging you so much

    Stefan Albert Horstmann, Sandy Hong, David Klein, Raphael Serafini, Martin Degeling, Martin Johns, Veelasha Moonsamy, and Alena Naiakshina. 2025. “Sorry for Bugging you so much. ” Exploring Developers’ Behavior Towards Privacy- Compliant Implementation. In2025 IEEE Symposium o...

    2025

  25. [33]

    I Need to Learn Better Searching Tactics for Privacy Policy Laws

    Stefan Albert Horstmann, Sandy Hong, Maziar Niazian, Cristiana Santos, and Alena Naiakshina. 2025. “I Need to Learn Better Searching Tactics for Privacy Policy Laws. ” Investigating Software Developers’ Behavior When Using Sources on Privacy Issues.arXiv preprint arXiv:2511.08...

    2025

  26. [34]

    Hugging Face. 2025. Hugging Face – The AI Community Building The Future. https://huggingface.co/. Accessed: November 13, 2025

    2025

  27. [35]

    International Association of Privacy Professionals. 2024. IAPP Certifications. https://iapp.org/certify/. Accessed: June 1, 2024

    2024

  28. [36]

    Leonardo Horn Iwaya, Muhammad Ali Babar, and Awais Rashid. 2023. Privacy Engineering in the Wild: Understanding the Practitioners’ Mindset, Organisa- tional Aspects, and Current Practices.IEEE Transactions on Software Engineering (2023)

    2023

  29. [37]

    Vijayanta Jain, Sepideh Ghanavati, Sai Teja Peddinti, and Collin McMillan. 2023. Towards Fine-Grained Localization of Privacy Behaviors. InIEEE 8th Euro- pean Symposium on Security and Privacy. 258–277. https://doi.org/10.1109/ EuroSP57164.2023.00024

    2023

  30. [38]

    Vijayanta Jain, Sepideh Ghanavati, Sai Teja Peddinti, and Collin McMillan. 2026. Automated Generation of Accurate Privacy Captions From Android Source Code Using Large Language Models.arXiv preprint arXiv:2601.06276(2026)

    2026

  31. [39]

    Vijayanta Jain, Sanonda Datta Gupta, Sepideh Ghanavati, Sai Teja Peddinti, and Collin McMillan. 2022. PAcT: Detecting and Classifying Privacy Behavior of Android Applications. InProc. of the 15th ACM Conf. on Security and Privacy in Wireless and Mobile Networks. ACM, 104–118

    2022

  32. [40]

    Tianshi Li, Yuvraj Agarwal, and Jason I Hong. 2018. Coconut: An IDE Plugin for Developing Privacy-Friendly Apps.Proceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies2, 4 (2018), 1–35

    2018

  33. [41]

    Tianshi Li, Elizabeth Louie, Laura Dabbish, and Jason I Hong. 2021. How Develop- ers Talk About Personal Data and What It Means for User Privacy: A Case Study of A Developer Forum on Reddit.Proceedings of the ACM on Human-Computer Interaction4, CSCW3 (2021), 1–28

    2021

  34. [42]

    Jenny T Liang, Chenyang Yang, and Brad A Myers. 2024. A Large-Scale Survey on The Usability of AI Programming Assistants: Successes and Challenges. In Proceedings of the 46th IEEE/ACM International Conference on Software Engineering. 1–13

    2024

  35. [43]

    Alberto Muñoz-Ortiz, Carlos Gómez-Rodríguez, and David Vilares. 2024. Con- trasting Linguistic Patterns in Human and LLM-Generated News Text.Artificial Intelligence Review57 (2024), 265–292

    2024

  36. [44]

    Jai Kruthunz Naveen Kumar, Aishwarya Umeshkumar Surani, Harkirat Singh, and Sanchari Das. 2026. Privacy Discourse and Emotional Dynamics in Mental Health Information Interaction on Reddit. InProceedings of the 2026 Conference on Human Information Interaction and Retrieval. Ass...

    2026

  37. [45]

    Norton and Travis D

    Thomas B. Norton and Travis D. Breaux. 2026. Privacy by Design’s Last Mile: Practitioner Evidence of Translation Friction at the Legal-Engineering Interface. In Submission: International Data Privacy Law(2026)

    2026

  38. [46]

    OpenAI. 2025. API Platform. https://openai.com/api/. Accessed: November 13, 2025

    2025

  39. [47]

    Nicholas Pangakis and Samuel Wolken. 2024. Keeping Humans in the Loop: Human-Centered Automated Annotation with Generative AI.arXiv preprint arXiv:2409.09467(2024)

    2024

  40. [48]

    Jonathan Parsons, Michael Schrider, Oyebanjo Ogunlela, and Sepideh Ghana- vati. 2023. Understanding Developers Privacy Concerns Through Reddit Thread 14 Proceedings on Privacy Enhancing Technologies YYYY(X) Analysis.Joint Proc. of REFSQ-2023 Workshops, Doctoral Symposium, Post...

    2023

  41. [49]

    PECB. 2024. Certified Data Protection Officer (CDPO). https: //pecb.com/en/education-and-certification-for-individuals/gdpr/certified- data-protection-officer. Accessed: May 22, 2025

    2024

  42. [50]

    Aria Pessianzadeh, Naima Sultana, Hildegarde Van den Bulck, David Gefen, Shahin Jabbari, and Rezvaneh Rezapour. 2025. In Generative AI We (Dis) Trust? Computational Analysis of Trust and Distrust in Reddit Discussions.arXiv preprint arXiv:2510.16173(2025)

    2025

  43. [51]

    Maxwell Prybylo, Sara Haghighi, Sai Teja Peddinti, and Sepideh Ghanavati. 2024. Evaluating Privacy Perceptions, Experience, and Behavior of Software Devel- opment Teams. InTwentieth Symposium on Usable Privacy and Security (SOUPS 2024). USENIX Association, 101–120

    2024

  44. [52]

    Sarah Santos, Sara Haghighi, Sepideh Ghanavati, Travis D Breaux, and Thomas B Norton. 2024. Patterns of Inquiry in a Community Forum for Legal Compliance with Privacy Law. In2024 IEEE 32nd International Requirements Engineering Conference Workshops (REW). IEEE, 251–259

    2024

  45. [53]

    Raphael Serafini, Stefan Albert Horstmann, and Alena Naiakshina. 2024. Engaging Company Developers in Security Research Studies: A Comprehensive Literature Review and Quantitative Survey. In33rd USENIX Security Symposium (USENIX Security 24). 3277–3294

    2024

  46. [54]

    Hanshu Shen, Lyukesheng Shen, Wenqi Wu, and Kejun Zhang. 2025. IdeationWeb: Tracking the Evolution of Design Ideas in Human-AI Co-Creation. InProceedings of the 2025 CHI Conference on Human Factors in Computing Systems(Yokohama Japan)(CHI’25). Association for Computing Machine...

    2025 doi

  47. [55]

    Daniel J Solove. 2005. A Taxonomy of Privacy.U. Pa. l. Rev.154 (2005), 477

    2005

  48. [56]

    Georgios Spanos and Lefteris Angelis. 2016. The Impact of Information Security Events to the Stock Market: A Systematic Literature Review.Computers & Security (2016), 216–229

    2016

  49. [57]

    Charles Spearman. 1961. The Proof and Measurement of Association Between Two Things. (1961)

    1961

  50. [58]

    Mohammad Tahaei, Julia Bernd, and Awais Rashid. 2022. Privacy, permissions, and the health app ecosystem: A stack overflow exploration. InProceedings of the 2022 European Symposium on Usable Security. 117–130

    2022

  51. [59]

    Mohammad Tahaei, Alisa Frik, and Kami Vaniea. 2021. Deciding on personalized ads: Nudging developers about user privacy. InSeventeenth Symposium on Usable Privacy and Security (SOUPS 2021). 573–596

    2021

  52. [60]

    Mohammad Tahaei, Alisa Frik, and Kami Vaniea. 2021. Privacy champions in software teams: Understanding their motivations, strategies, and challenges. In Proceedings of the 2021 CHI Conference on Human Factors in Computing Systems. 1–15

    2021

  53. [61]

    Mohammad Tahaei, Tianshi Li, and Kami Vaniea. 2022. Understanding Privacy- Related Advice on Stack Overflow.Proceedings on Privacy Enhancing Technologies 2022, 2 (2022), 114–131. https://doi.org/doi:10.2478/popets-2022-0038

    2022 doi

  54. [62]

    Mohammad Tahaei, Marvin Ramokapane, Tianshi Li, Jason I Hong, and Awais Rashid. 2022. Charting App Developers’ Journey through Privacy Regulation Features in Ad Networks. InThe 22nd Privacy Enhancing Technologies Symposium. 33–56

    2022

  55. [63]

    Mohammad Tahaei and Kami Vaniea. 2019. A survey on developer-centred security. In2019 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW). IEEE, 129–138

    2019

  56. [64]

    Mohammad Tahaei, Kami Vaniea, and Awais Rashid. 2022. Embedding Privacy into Design through Software Developers: Challenges and Solutions.IEEE Security & Privacy(2022), 49–57

    2022

  57. [65]

    Mohammad Tahaei, Kami Vaniea, and Naomi Saphra. 2020. Understanding Privacy-Related Questions on Stack Overflow. InProceedings of the 2020 CHI conference on human factors in computing systems. 1–14

    2020

  58. [66]

    Ruixiang Tang, Yu-Neng Chuang, and Xia Hu. 2024. The Science of Detecting LLM-Generated Text.Commun. ACM(2024)

    2024

  59. [67]

    Robert Tibshirani. 1996. Regression Shrinkage and Selection via the Lasso.Journal of the Royal Statistical Society Series B: Statistical Methodology(1996), 267–288

    1996

  60. [68]

    Petter Törnberg. 2024. Best Practices for Text Annotation with Large Language Models. (2024). arXiv:2402.05129 [cs.CL] https://arxiv.org/abs/2402.05129

    2024

  61. [69]

    Yang Wang. 2009. Privacy-Enhancing Technologies. InHandbook of research on social and organizational liabilities in information security. IGI Global, 203–227

    2009

  62. [70]

    Jason Wei, Xuezhi Wang, Dale Schuurmans, Maarten Bosma, Fei Xia, Ed Chi, Quoc V Le, Denny Zhou, et al. 2022. Chain-of-Thought Prompting Elicits Rea- soning in Large Language Models.Advances in neural information processing systems(2022), 24824–24837

    2022

  63. [71]

    Yusuke Yamamoto and Katsumi Tanaka. 2011. Enhancing credibility judg- ment of web search results. InProceedings of the SIGCHI Conference on Hu- man Factors in Computing Systems(Vancouver, BC, Canada)(CHI ’11). Asso- ciation for Computing Machinery, New York, NY, USA, 1235–1244...

    2011 doi

  64. [72]

    Mohammad Amin Zadenoori, Liping Zhao, Waad Alhoshan, and Alessio Ferrari

  65. [73]

    InRequirements Engineering: Foundation for Software Quality: 31st International Working Conference, REFSQ 2025, Barcelona, Spain, April 7–10, 2025, Proceedings

    Automatic Prompt Engineering: The Case of Requirements Classification. InRequirements Engineering: Foundation for Software Quality: 31st International Working Conference, REFSQ 2025, Barcelona, Spain, April 7–10, 2025, Proceedings. Springer-Verlag, 217–225

    2025

  66. [74]

    medium,

    J.D. Zamfirescu-Pereira, Eunice Jun, Michael Terry, Qian Yang, and Bjoern Hart- mann. 2025. Beyond Code Generation: LLM-supported Exploration of the Pro- gram Design Space. InProceedings of the 2025 CHI Conference on Human Factors in Computing Systems (CHI ’25). Association fo...

    2025 doi

Pith tools

Reviewed June 30, 2026 · model on record in the stance chip above.