User Analysis

Our users are regular people, keenly interested in privacy but not necessarily knowledgeable about the technical details of cryptography. They want to discuss potentially sensitive or incriminating topics without being tracked.

They could be political activists in an environment where the government doesn't support their viewpoints. They could be children wanting to discuss something without their parents seeing it. They could be researchers looking for a way to collect secure, anonymous data from others. Or they could be employees of an enterprise working on a sensitive project and don't want technical details to be divulged to outside sources.

Characteristics

• Concerned with Privacy
• Unconcerned with Technical Details
• Concerned about Personal Safety

Task Analysis

General Actions

Conversation Types

Conversation Actions

• Have a secure and anonymous group chat (private to the group).
  • Join/leave the group chat.
  • Send/receive messages.
  • Log the group chat.
• Have a public and anonymous conversation (readable by all).
  • Join/leave the conversation.
  • Send/receive messages.
  • Log the conversation.
• Have a direct, private, and anonymous and secure conversations.
  • Send/receive messages.
  • Log the conversation.
• Authenticate pseudonyms.
• Find public conversation topics.
• Erase evidence of communication.

Questions

• Have you ever found the need to securely converse with another person?
• Have you ever censored what you were saying to someone because you were worried about privacy?

Interviews

Interview 1

We interviewed multiple users to learn more about how they might value our product.

The Road Warrior

This user works as a consultant and is constantly on the road. It is very important for him to be able to communicate with clients, co-workers, and to his family back at home, and he relies very much on his mobile devices to allow him to stay in touch and coordinate his life. In his line of work he frequently deals with sensitive corporate information. He ends up using two mobile devices -- a secure device dedicated to work, and a personal one for other purposes. He understands the need to keep client information secure but doesn't really understand all of the ways in which using an unsecure device can actually be potentially harmful to his firm and/or himself. He would love to be able to deal with both work and personal tasks from a single application.

Key Insights

• Aware of potential security threats but not sure exactly how to protect himself
•  Willing to deal with multiple devices in order to preserve security but finds it very inconvenient

Interview 2

The subject stated that he would use such a system for private conversations with his girlfriend. At first didn't feel that he would ever need true anonymity but felt that a simple encrypted messaging system could be useful. Apon further thought the subject noted that anonymity would be useful when discussing sensitive subjects about which he held a strong, potentially politically incorrect, opinion.

In order to go through the hassle of installing the app, the subject indicated that he would need a significant reason. The app would have to inspire trust.

Interview 3

The subject said that he would find secure communication especially useful for discussing private matters. He says he often leaves out details that he would not want leaked when conversing via text message on a sensitive or embarrassing topic. Also it would be good for conversations that may have consequences if read by a third party. The subject said they would not know what to do if they wanted to communicate securely at the moment. They will usually call if they need to discuss sensitive information, as it leaves less of an explicit trail.

He said he would use secure communication if it was free and simple to use. Also, he also said that it would be worth paying for if used in a business-like setting where sensitive information is being exchanged. He noted it would be more careless/less hesitant to be straight forward via messages with security assurances.
When discussing secure communication that also hides who you’re talking to, he stated that cloaking who you’re talking to would be a big benefit. It prevents leaking who you associate with, which can give away a lot of information.
The subject said that he would find secure communication especially useful for discussing private matters. He says he often leaves out details that he would not want leaked when conversing via text message on a sensitive or embarrassing topic. Also it would be good for conversations that may have consequences if read by a third party. The subject said they would not know what to do if they wanted to communicate securely at the moment. They will usually call if they need to discuss sensitive information, as it leaves less of an explicit trail.

He said he would use secure communication if it was free and simple to use. Also, he also said that it would be worth paying for if used in a business-like setting where sensitive information is being exchanged. He noted it would be more careless/less hesitant to be straight forward via messages with security assurances.

When discussing secure communication that also hides who you’re talking to, he stated that cloaking who you’re talking to would be a big benefit. It prevents leaking who you associate with, which can give away a lot of information.