A clutch of case studies forces us to rethink the way we look at commercialising leisure work online

Behavioural scientist Pragya Agarwal spells out how our internal biases shape our worldviews

Jenny Odell’s take on avoiding the seduction of the online world is a must-read for Covid times

This book dissects the process of ‘judgment’ and why it goes wrong more often than not

Kaji Nemu, a variety of indigenous lemon, was declared the state fruit of Assam, and lovers of this fruit, share thoughts about this tangy delight

The people who harvest the seeds of the high-protein crop say the government offers them little support, and they now want a minimum support price to ensure that the crop is sustainable for cultivation

Seed Stories, a documentary recently screened in Bengaluru, is a nuanced exploration of the efforts of barefoot ecologist Dr. Debal Deb and his team and their attempt to conserve over 1,000 endangered heirloom varieties of rice

The average retail prices shot up to ₹65-70 per kilo in the north and the eastern regions in October

Durham, North Carolina : Pitchstone Publishing, [2024]

Babar Azam, whose cover drives have some similarities with Kohli, has enjoyed a conistent run in Tests since 2018 matching the likes of Kohli, Australia's run machine Steve Smith, New Zealand skipper Kane Williamson and England's Joe Root.

Statistics don't always reflect a true picture, and Siraj doesn't want to be critical of himself regarding the number of wickets in his kitty.

Is the idea of a dry monsoon beginning to parch your appetite for investing?

This is the largest IPO in India, surpassing LIC's initial share sale of ₹21,000 crore.

The ₹27,870 crore initial share sale got bids for 14,07,68,187 shares against 9,97,69,810 shares on offer, translating into 1.41 times the subscription, as per NSE data till 13:21 hours

The IPO received lowest retail subscription among some of the big IPOs that had hit the Indian capital markets

This is the biggest ever IPO to have ever hit in the Indian capital markets

Hyundai shares climbed 5.91% to ₹1,928.15 from the previous close on the BSE. At the NSE, the stock surged 6% to ₹1,928.90

Why is gold considered a safety cushion by central banks? When does demand for the yellow metal peak in India? Why does the World Gold Council expect an increased demand for gold from rural areas? What factors determine gold prices?

Molly Wilson and Eileen Wagner battle the age old Christmas issues of right and wrong, good and evil, and how the messages we send through iconography design can impact the decisions users make around important issues of security. Are you icons wise men, or are they actually King Herod?

Congratulations, you’re locked out! The paradox of security visuals

Designers of technology are fortunate to have an established visual language at our fingertips. We try to use colors and symbols in a way that is consistent with people’s existing expectations. When a non-designer asks a designer to “make it intuitive,” what they’re really asking is, “please use elements people already know, even if the concept is new.”

Lots of options for security icons

We’re starting to see more consistency in the symbols that tech uses for privacy and security features, many of them built into robust, standardized icon sets and UI kits. To name a few: we collaborated with Adobe in 2018 to create the Vault UI Kit, which includes UI elements for security, like touch ID login and sending a secure copy of a file. Adobe has also released a UI kit for cookie banners.

Even UI kits that aren’t specialized in security and privacy include icons that can be used to communicate security concepts, like InVision’s Smart Home UI Kit. And, of course, nearly every icon set has security-related symbols, from Material Design to Iconic.

Many of these icons allude to physical analogies for the states and actions we’re trying to communicate. Locks and keys; shields for protection; warning signs and stop signs; happy faces and sad faces. Using these analogies helps build a bridge from the familiar, concrete world of door locks and keyrings to the unfamiliar, abstract realm of public- and private-key encryption.

When concepts don’t match up

Many of the concepts we’re working with are pairs of opposites. Locked or unlocked. Private or public. Trusted or untrusted. Blocked or allowed. Encouraged or discouraged. Good or evil. When those concept pairs appear simultaneously, however, we quickly run into UX problems.

Take the following example. Security is good, right? When something is locked, that means you’re being responsible and careful, and nobody else can access it. It’s protected. That’s cause for celebration. Being locked and protected is a good state.

Whoops.

If the user didn’t mean to lock something, or if the locked state is going to cause them any inconvenience, then extra security is definitely not good news.

Another case in point: Trust is good, right? Something trusted is welcome in people’s lives. It’s allowed to enter, not blocked, and it’s there because people wanted it there. So trusting and allowing something is good.

Nope. Doesn’t work at all. What if we try the opposite colors and iconography?

That’s even worse. Even though we, the designers, were trying both times to keep the user from downloading malware, the user’s actual behavior makes our design completely nonsensical.

Researchers from Google and UC Berkeley identified this problem in a 2016 USENIX paper analyzing connection security indicators. They pointed out that, when somebody clicks through a warning to an “insecure” website, the browser will show a “neutral or positive indicator” in the URL bar – leading them to think that the website is now safe. Unlike our example above, this may not look like nonsense from the user point of view, but from a security standpoint, suddenly showing “safe/good” without any actual change in safety is a pretty dangerous move.

The deeper issue

Now, one could file these phenomena under “mismatching iconography,” but we think there is a deeper issue here that concerns security UI in particular. Security interface design pretty much always has at least a whiff of “right vs. wrong.” How did this moralizing creep into an ostensibly technical realm?

Well, we usually have a pretty good idea what we’d like people to do with regards to security. Generally speaking, we’d like them to be more cautious than they are (at least, so long as we’re not trying to sneak around behind their backs with confusing consent forms and extracurricular data use). Our well-intentioned educational enthusiasm leads us to use little design nudges that foster better security practices, and that makes us reach into the realm of social and psychological signals. But these nudges can easily backfire and turn into total nonsense.

Another example: NoScript

“No UX designer would be dense enough to make these mistakes,” you might be thinking.

Well, we recently did a redesign of the open-source content-blocking browser extension NoScript, and we can tell you from experience: finding the right visual language for pairs of opposites was a struggle.

NoScript is a browser extension that helps you block potential malware from the websites you’re visiting. It needs to communicate a lot of states and actions to users. A single script can be blocked or allowed. A source of scripts can be trusted or untrusted. NoScript is a tool for the truly paranoid, so in general, wants to encourage blocking and not trusting. But:

“An icon with a crossed-out item is usually BAD, and a sign without anything is usually GOOD. But of course, here blocking something is actually GOOD, while blocking nothing is actually BAD. So whichever indicators NoScript chooses, they should either aim to indicate system state [allow/block] or recommendation [good/bad], but not both. And in any case, NoScript should probably stay away from standard colors and icons.”

So we ended up using hardly any of the many common security icons available. No shields, no alert! signs, no locked locks, no unlocked locks. And we completely avoided the red/green palette to keep from taking on unintended meaning.

Navigating the paradox

Security recommendations appear in most digital services are built nowadays. As we move into 2020, we expect to see a lot more conscious choice around colors, icons, and words related to security. For a start, Firefox already made a step in the right direction by streamlining indicators for SSL encryption as well as content blocking. (Spoilers: they avoided adding multiple dimensions of indicators, too!)

The most important thing to keep in mind, as you’re choosing language around security and privacy features, is: don’t conflate social and technical concepts. Trusting your partner is good. Trusting a website? Well, could be good, could be bad. Locking your bike? Good idea. Locking a file? That depends.

Think about the technical facts you’re trying to communicate. Then, and only then, consider if there’s also a behavioral nudge you want to send, and if you are, try to poke holes in your reasoning. Is there ever a case where your nudge could be dangerous? Colors, icons, and words give you a lot of control over how exactly people experience security and privacy features. Using them in a clear and consistent way will help people understand their choices and make more conscious decisions around security.

About the author

Molly Wilson is a designer by training and a teacher at heart: her passion is leveraging human-centered design to help make technology clear and understandable. She has been designing and leading programs in design thinking and innovation processes since 2010, first at the Stanford d.school in Palo Alto, CA and later at the Hasso-Plattner-Institut School of Design Thinking in Potsdam, Germany. Her work as an interaction designer has focused on complex products in finance, health, and education. Outside of work, talk to her about cross-cultural communication, feminism, DIY projects, and visual note-taking.

Molly holds a master’s degree in Learning, Design, and Technology from Stanford University, and a bachelor’s degree magna cum laude in History of Science from Harvard University. See more about her work and projects at http://molly.is.

Eileen Wagner is Simply Secure’s in-house logician. She advises teams and organizations on UX design, supports research and user testing, and produces open resources for the community. Her focus is on information architecture, content strategy, and interaction design. Sometimes she puts on her admin hat and makes sure her team has the required infrastructure to excel.

She previously campaigned for open data and civic tech at the Open Knowledge Foundation Germany. There she helped establish the first public funding program for open source projects in Germany, the Prototype Fund. Her background is in analytic philosophy (BA Cambridge) and mathematical logic (MSc Amsterdam), and she won’t stop talking about barbershop music.

More articles by Molly Wilson & Eileen

A conversation and an exhibition that offer glimpses of the city of Nizams

Do you have treggings in your closet yet? A. SHRIKUMAR tells you why you should own a pair or more of these comfortably trendy pants

RAJ GANPATH explains why it’s important to explain your lifestyle changes to those closest to you

Being healthy is not easy. It includes a little hard work on the choices you make about how you eat and live

Zubin Atre, one of the leading yoga teachers in the city, talks about the art of partner yoga.

On the occasion of the recently concluded Doctor’s Day, Dr. P. Guhan draws attention to health apps on breast cancer awareness and tobacco cessation

Hyderabad-based Abhishek Duttagupta on how he scaled Mt Kun, Mt Kang Yatse and completed the Ladakh ultra marathon back-to-back

With a 10,000-branch network, MD & CEO Goel eyes significant growth opportunities to expand business and scale new heights.

Montreal : National Film Board of Canada, 2019

Montreal : National Film Board of Canada, 2022

Wiesbaden : Vieweg, 2007

Boston : Birkhauser, 2007

Mangaluru police arrest Mohammed Hafeez for trafficking hydro weed from Thailand and also the Central Crime Branch seizes 2.5 kg of cannabis worth ₹75,000