Elio Qoshi, Anxhela Maloku (Angie) – Identifying and Addressing Usability Vulnerabilities #FOSSBack

This talk, presented by Elio Qoshi and Anxhela Maloku, explores the concept of usability vulnerabilities and their impact on security. By referencing work with SecureDrop, Qubes OS, and Mailvelope, the speakers define usability vulnerabilities as design flaws that lead users to engage in unsafe behavior, despite technically sound implementations. The session outlines a systematic approach for identifying and addressing these vulnerabilities within security review cycles, emphasizing the integration of usability findings into threat models. Attendees will gain insights on how to evaluate design issues with the same rigor applied to code vulnerabilities, ultimately aiming to prevent security regressions before deployment.