---
_id: '67333'
author:
- first_name: Darya
  full_name: Zarkalam, Darya
  last_name: Zarkalam
- first_name: Anna Lena
  full_name: Rotthaler, Anna Lena
  id: '97843'
  last_name: Rotthaler
- first_name: Lucy
  full_name: Simko, Lucy
  last_name: Simko
- first_name: Yasemin
  full_name: Acar, Yasemin
  id: '94636'
  last_name: Acar
citation:
  ama: 'Zarkalam D, Rotthaler AL, Simko L, Acar Y. From Thrift Stores to Digital Storefronts:
    Users’ Perspectives on Privacy and Security of Online Second-Hand Shopping in
    Germany. In: <i>Twenty-Second Symposium on Usable Privacy and Security (SOUPS
    2026)</i>. ; 2026:141–160.'
  apa: 'Zarkalam, D., Rotthaler, A. L., Simko, L., &#38; Acar, Y. (2026). From Thrift
    Stores to Digital Storefronts: Users’ Perspectives on Privacy and Security of
    Online Second-Hand Shopping in Germany. <i>Twenty-Second Symposium on Usable Privacy
    and Security (SOUPS 2026)</i>, 141–160.'
  bibtex: '@inproceedings{Zarkalam_Rotthaler_Simko_Acar_2026, title={From Thrift Stores
    to Digital Storefronts: Users’ Perspectives on Privacy and Security of Online
    Second-Hand Shopping in Germany}, booktitle={Twenty-Second Symposium on Usable
    Privacy and Security (SOUPS 2026)}, author={Zarkalam, Darya and Rotthaler, Anna
    Lena and Simko, Lucy and Acar, Yasemin}, year={2026}, pages={141–160} }'
  chicago: 'Zarkalam, Darya, Anna Lena Rotthaler, Lucy Simko, and Yasemin Acar. “From
    Thrift Stores to Digital Storefronts: Users’ Perspectives on Privacy and Security
    of Online Second-Hand Shopping in Germany.” In <i>Twenty-Second Symposium on Usable
    Privacy and Security (SOUPS 2026)</i>, 141–160, 2026.'
  ieee: 'D. Zarkalam, A. L. Rotthaler, L. Simko, and Y. Acar, “From Thrift Stores
    to Digital Storefronts: Users’ Perspectives on Privacy and Security of Online
    Second-Hand Shopping in Germany,” in <i>Twenty-Second Symposium on Usable Privacy
    and Security (SOUPS 2026)</i>, 2026, pp. 141–160.'
  mla: 'Zarkalam, Darya, et al. “From Thrift Stores to Digital Storefronts: Users’
    Perspectives on Privacy and Security of Online Second-Hand Shopping in Germany.”
    <i>Twenty-Second Symposium on Usable Privacy and Security (SOUPS 2026)</i>, 2026,
    pp. 141–160.'
  short: 'D. Zarkalam, A.L. Rotthaler, L. Simko, Y. Acar, in: Twenty-Second Symposium
    on Usable Privacy and Security (SOUPS 2026), 2026, pp. 141–160.'
date_created: 2026-10-01T16:07:38Z
date_updated: 2026-10-01T16:08:53Z
language:
- iso: eng
page: 141–160
publication: Twenty-Second Symposium on Usable Privacy and Security (SOUPS 2026)
status: public
title: 'From Thrift Stores to Digital Storefronts: Users’ Perspectives on Privacy
  and Security of Online Second-Hand Shopping in Germany'
type: conference
user_id: '97843'
year: '2026'
...
---
_id: '62738'
abstract:
- lang: eng
  text: 'Vulnerability disclosures are necessary to improve the security of our digital
    ecosystem. However, they can also be challenging for researchers: it may be hard
    to find out who the affected parties even are, or how to contact them. Researchers
    may be ignored or face adversity when disclosing vulnerabilities. We investigate
    researchers'' experiences with vulnerability disclosures, extract best practices,
    and make recommendations for researchers, institutions that employ them, industry,
    and regulators to enable effective vulnerability disclosures.'
author:
- first_name: Harshini
  full_name: Sri Ramulu, Harshini
  id: '99000'
  last_name: Sri Ramulu
  orcid: 0000-0002-0000-5843
- first_name: Anna Lena
  full_name: Rotthaler, Anna Lena
  id: '97843'
  last_name: Rotthaler
- first_name: Jost
  full_name: Rossel, Jost
  id: '58331'
  last_name: Rossel
  orcid: 0000-0002-3182-4059
- first_name: Rachel
  full_name: Gonzalez Rodriguez, Rachel
  last_name: Gonzalez Rodriguez
- first_name: Dominik
  full_name: Wermke, Dominik
  last_name: Wermke
- first_name: Sascha
  full_name: Fahl, Sascha
  last_name: Fahl
- first_name: Tadayoshi
  full_name: Kohno, Tadayoshi
  last_name: Kohno
- first_name: Juraj
  full_name: Somorovsky, Juraj
  id: '83504'
  last_name: Somorovsky
  orcid: 0000-0002-3593-7720
- first_name: Yasemin
  full_name: Acar, Yasemin
  id: '94636'
  last_name: Acar
citation:
  ama: 'Sri Ramulu H, Rotthaler AL, Rossel J, et al. Poster: Computer Security Researchers’
    Experiences with Vulnerability Disclosures. In: <i>Proceedings of the 2025 ACM
    SIGSAC Conference on Computer and Communications Security</i>. ACM; 2025. doi:<a
    href="https://doi.org/10.1145/3719027.3760723">10.1145/3719027.3760723</a>'
  apa: 'Sri Ramulu, H., Rotthaler, A. L., Rossel, J., Gonzalez Rodriguez, R., Wermke,
    D., Fahl, S., Kohno, T., Somorovsky, J., &#38; Acar, Y. (2025). Poster: Computer
    Security Researchers’ Experiences with Vulnerability Disclosures. <i>Proceedings
    of the 2025 ACM SIGSAC Conference on Computer and Communications Security</i>.
    <a href="https://doi.org/10.1145/3719027.3760723">https://doi.org/10.1145/3719027.3760723</a>'
  bibtex: '@inproceedings{Sri Ramulu_Rotthaler_Rossel_Gonzalez Rodriguez_Wermke_Fahl_Kohno_Somorovsky_Acar_2025,
    title={Poster: Computer Security Researchers’ Experiences with Vulnerability Disclosures},
    DOI={<a href="https://doi.org/10.1145/3719027.3760723">10.1145/3719027.3760723</a>},
    booktitle={Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications
    Security}, publisher={ACM}, author={Sri Ramulu, Harshini and Rotthaler, Anna Lena
    and Rossel, Jost and Gonzalez Rodriguez, Rachel and Wermke, Dominik and Fahl,
    Sascha and Kohno, Tadayoshi and Somorovsky, Juraj and Acar, Yasemin}, year={2025}
    }'
  chicago: 'Sri Ramulu, Harshini, Anna Lena Rotthaler, Jost Rossel, Rachel Gonzalez
    Rodriguez, Dominik Wermke, Sascha Fahl, Tadayoshi Kohno, Juraj Somorovsky, and
    Yasemin Acar. “Poster: Computer Security Researchers’ Experiences with Vulnerability
    Disclosures.” In <i>Proceedings of the 2025 ACM SIGSAC Conference on Computer
    and Communications Security</i>. ACM, 2025. <a href="https://doi.org/10.1145/3719027.3760723">https://doi.org/10.1145/3719027.3760723</a>.'
  ieee: 'H. Sri Ramulu <i>et al.</i>, “Poster: Computer Security Researchers’ Experiences
    with Vulnerability Disclosures,” 2025, doi: <a href="https://doi.org/10.1145/3719027.3760723">10.1145/3719027.3760723</a>.'
  mla: 'Sri Ramulu, Harshini, et al. “Poster: Computer Security Researchers’ Experiences
    with Vulnerability Disclosures.” <i>Proceedings of the 2025 ACM SIGSAC Conference
    on Computer and Communications Security</i>, ACM, 2025, doi:<a href="https://doi.org/10.1145/3719027.3760723">10.1145/3719027.3760723</a>.'
  short: 'H. Sri Ramulu, A.L. Rotthaler, J. Rossel, R. Gonzalez Rodriguez, D. Wermke,
    S. Fahl, T. Kohno, J. Somorovsky, Y. Acar, in: Proceedings of the 2025 ACM SIGSAC
    Conference on Computer and Communications Security, ACM, 2025.'
conference:
  end_date: 2025-10-17
  start_date: 2025-10-13
date_created: 2025-12-02T08:48:00Z
date_updated: 2025-12-02T08:54:18Z
doi: 10.1145/3719027.3760723
keyword:
- software vulnerabilities
- vulnerability disclosure
- security research
language:
- iso: eng
main_file_link:
- open_access: '1'
  url: https://dl.acm.org/doi/10.1145/3719027.3760723
oa: '1'
publication: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications
  Security
publication_status: published
publisher: ACM
status: public
title: 'Poster: Computer Security Researchers'' Experiences with Vulnerability Disclosures'
type: conference
user_id: '58331'
year: '2025'
...
---
_id: '61129'
author:
- first_name: Anna Lena
  full_name: Rotthaler, Anna Lena
  id: '97843'
  last_name: Rotthaler
- first_name: Harshini
  full_name: Sri Ramulu, Harshini
  id: '99000'
  last_name: Sri Ramulu
  orcid: 0000-0002-0000-5843
- first_name: Lucy
  full_name: Simko, Lucy
  last_name: Simko
- first_name: Sascha
  full_name: Fahl, Sascha
  last_name: Fahl
- first_name: Yasemin
  full_name: Acar, Yasemin
  id: '94636'
  last_name: Acar
citation:
  ama: 'Rotthaler AL, Sri Ramulu H, Simko L, Fahl S, Acar Y. “It’s Time. Time for
    Digital Security.”: An End User Study on Actionable Security and Privacy Advice.
    In: Blanton M, Enck W, Nita-Rotaru C, eds. <i>IEEE Symposium on Security and Privacy,
    SP 2025, San Francisco, CA, USA, May 12-15, 2025</i>. IEEE; 2025:2228–2245. doi:<a
    href="https://doi.org/10.1109/SP61157.2025.00100">10.1109/SP61157.2025.00100</a>'
  apa: 'Rotthaler, A. L., Sri Ramulu, H., Simko, L., Fahl, S., &#38; Acar, Y. (2025).
    “It’s Time. Time for Digital Security.”: An End User Study on Actionable Security
    and Privacy Advice. In M. Blanton, W. Enck, &#38; C. Nita-Rotaru (Eds.), <i>IEEE
    Symposium on Security and Privacy, SP 2025, San Francisco, CA, USA, May 12-15,
    2025</i> (pp. 2228–2245). IEEE. <a href="https://doi.org/10.1109/SP61157.2025.00100">https://doi.org/10.1109/SP61157.2025.00100</a>'
  bibtex: '@inproceedings{Rotthaler_Sri Ramulu_Simko_Fahl_Acar_2025, title={“It’s
    Time. Time for Digital Security.”: An End User Study on Actionable Security and
    Privacy Advice}, DOI={<a href="https://doi.org/10.1109/SP61157.2025.00100">10.1109/SP61157.2025.00100</a>},
    booktitle={IEEE Symposium on Security and Privacy, SP 2025, San Francisco, CA,
    USA, May 12-15, 2025}, publisher={IEEE}, author={Rotthaler, Anna Lena and Sri
    Ramulu, Harshini and Simko, Lucy and Fahl, Sascha and Acar, Yasemin}, editor={Blanton,
    Marina and Enck, William and Nita-Rotaru, Cristina}, year={2025}, pages={2228–2245}
    }'
  chicago: 'Rotthaler, Anna Lena, Harshini Sri Ramulu, Lucy Simko, Sascha Fahl, and
    Yasemin Acar. “‘It’s Time. Time for Digital Security.’: An End User Study on Actionable
    Security and Privacy Advice.” In <i>IEEE Symposium on Security and Privacy, SP
    2025, San Francisco, CA, USA, May 12-15, 2025</i>, edited by Marina Blanton, William
    Enck, and Cristina Nita-Rotaru, 2228–2245. IEEE, 2025. <a href="https://doi.org/10.1109/SP61157.2025.00100">https://doi.org/10.1109/SP61157.2025.00100</a>.'
  ieee: 'A. L. Rotthaler, H. Sri Ramulu, L. Simko, S. Fahl, and Y. Acar, “‘It’s Time.
    Time for Digital Security.’: An End User Study on Actionable Security and Privacy
    Advice,” in <i>IEEE Symposium on Security and Privacy, SP 2025, San Francisco,
    CA, USA, May 12-15, 2025</i>, 2025, pp. 2228–2245, doi: <a href="https://doi.org/10.1109/SP61157.2025.00100">10.1109/SP61157.2025.00100</a>.'
  mla: 'Rotthaler, Anna Lena, et al. “‘It’s Time. Time for Digital Security.’: An
    End User Study on Actionable Security and Privacy Advice.” <i>IEEE Symposium on
    Security and Privacy, SP 2025, San Francisco, CA, USA, May 12-15, 2025</i>, edited
    by Marina Blanton et al., IEEE, 2025, pp. 2228–2245, doi:<a href="https://doi.org/10.1109/SP61157.2025.00100">10.1109/SP61157.2025.00100</a>.'
  short: 'A.L. Rotthaler, H. Sri Ramulu, L. Simko, S. Fahl, Y. Acar, in: M. Blanton,
    W. Enck, C. Nita-Rotaru (Eds.), IEEE Symposium on Security and Privacy, SP 2025,
    San Francisco, CA, USA, May 12-15, 2025, IEEE, 2025, pp. 2228–2245.'
date_created: 2025-09-04T11:13:58Z
date_updated: 2026-10-01T16:06:17Z
doi: 10.1109/SP61157.2025.00100
editor:
- first_name: Marina
  full_name: Blanton, Marina
  last_name: Blanton
- first_name: William
  full_name: Enck, William
  last_name: Enck
- first_name: Cristina
  full_name: Nita-Rotaru, Cristina
  last_name: Nita-Rotaru
language:
- iso: eng
page: 2228–2245
publication: IEEE Symposium on Security and Privacy, SP 2025, San Francisco, CA, USA,
  May 12-15, 2025
publisher: IEEE
status: public
title: '"It’s Time. Time for Digital Security.": An End User Study on Actionable Security
  and Privacy Advice'
type: conference
user_id: '97843'
year: '2025'
...
---
_id: '67335'
author:
- first_name: Anna Lena
  full_name: Rotthaler, Anna Lena
  id: '97843'
  last_name: Rotthaler
- first_name: Simon
  full_name: Oberthür, Simon
  id: '383'
  last_name: Oberthür
- first_name: Juraj
  full_name: Somorovsky, Juraj
  id: '83504'
  last_name: Somorovsky
  orcid: 0000-0002-3593-7720
- first_name: Kirsten
  full_name: Thommes, Kirsten
  id: '72497'
  last_name: Thommes
- first_name: Simon Thanh-Nam
  full_name: Trang, Simon Thanh-Nam
  id: '98948'
  last_name: Trang
  orcid: 0000-0002-4784-4038
- first_name: Yasemin
  full_name: Acar, Yasemin
  id: '94636'
  last_name: Acar
- first_name: Michel
  full_name: Cukier, Michel
  last_name: Cukier
- first_name: William
  full_name: Enck, William
  last_name: Enck
- first_name: Alexandros
  full_name: Kapravelos, Alexandros
  last_name: Kapravelos
- first_name: Christian
  full_name: Kästner, Christian
  last_name: Kästner
citation:
  ama: 'Rotthaler AL, Oberthür S, Somorovsky J, et al. S3C2 SICP Summit 2025-06: Vulnerability
    Response Summit. <i>arXiv preprint arXiv:251202600</i>. Published online 2025.'
  apa: 'Rotthaler, A. L., Oberthür, S., Somorovsky, J., Thommes, K., Trang, S. T.-N.,
    Acar, Y., Cukier, M., Enck, W., Kapravelos, A., &#38; Kästner, C. (2025). S3C2
    SICP Summit 2025-06: Vulnerability Response Summit. <i>ArXiv Preprint ArXiv:2512.02600</i>.'
  bibtex: '@article{Rotthaler_Oberthür_Somorovsky_Thommes_Trang_Acar_Cukier_Enck_Kapravelos_Kästner_2025,
    title={S3C2 SICP Summit 2025-06: Vulnerability Response Summit}, journal={arXiv
    preprint arXiv:2512.02600}, author={Rotthaler, Anna Lena and Oberthür, Simon and
    Somorovsky, Juraj and Thommes, Kirsten and Trang, Simon Thanh-Nam and Acar, Yasemin
    and Cukier, Michel and Enck, William and Kapravelos, Alexandros and Kästner, Christian},
    year={2025} }'
  chicago: 'Rotthaler, Anna Lena, Simon Oberthür, Juraj Somorovsky, Kirsten Thommes,
    Simon Thanh-Nam Trang, Yasemin Acar, Michel Cukier, William Enck, Alexandros Kapravelos,
    and Christian Kästner. “S3C2 SICP Summit 2025-06: Vulnerability Response Summit.”
    <i>ArXiv Preprint ArXiv:2512.02600</i>, 2025.'
  ieee: 'A. L. Rotthaler <i>et al.</i>, “S3C2 SICP Summit 2025-06: Vulnerability Response
    Summit,” <i>arXiv preprint arXiv:2512.02600</i>, 2025.'
  mla: 'Rotthaler, Anna Lena, et al. “S3C2 SICP Summit 2025-06: Vulnerability Response
    Summit.” <i>ArXiv Preprint ArXiv:2512.02600</i>, 2025.'
  short: A.L. Rotthaler, S. Oberthür, J. Somorovsky, K. Thommes, S.T.-N. Trang, Y.
    Acar, M. Cukier, W. Enck, A. Kapravelos, C. Kästner, ArXiv Preprint ArXiv:2512.02600
    (2025).
date_created: 2026-10-01T16:10:38Z
date_updated: 2026-10-01T16:11:00Z
language:
- iso: eng
publication: arXiv preprint arXiv:2512.02600
status: public
title: 'S3C2 SICP Summit 2025-06: Vulnerability Response Summit'
type: journal_article
user_id: '97843'
year: '2025'
...
---
_id: '67336'
author:
- first_name: Rami
  full_name: Sammak, Rami
  last_name: Sammak
- first_name: Anna Lena
  full_name: Rotthaler, Anna Lena
  id: '97843'
  last_name: Rotthaler
- first_name: Harshini
  full_name: Sri Ramulu, Harshini
  id: '99000'
  last_name: Sri Ramulu
  orcid: 0000-0002-0000-5843
- first_name: Dominik
  full_name: Wermke, Dominik
  last_name: Wermke
- first_name: Yasemin
  full_name: Acar, Yasemin
  id: '94636'
  last_name: Acar
citation:
  ama: 'Sammak R, Rotthaler AL, Sri Ramulu H, Wermke D, Acar Y. Developers’ approaches
    to software supply chain security: An interview study. In: <i>Proceedings of the
    2024 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses</i>.
    ; 2023:56–66.'
  apa: 'Sammak, R., Rotthaler, A. L., Sri Ramulu, H., Wermke, D., &#38; Acar, Y. (2023).
    Developers’ approaches to software supply chain security: An interview study.
    <i>Proceedings of the 2024 Workshop on Software Supply Chain Offensive Research
    and Ecosystem Defenses</i>, 56–66.'
  bibtex: '@inproceedings{Sammak_Rotthaler_Sri Ramulu_Wermke_Acar_2023, title={Developers’
    approaches to software supply chain security: An interview study}, booktitle={Proceedings
    of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem
    Defenses}, author={Sammak, Rami and Rotthaler, Anna Lena and Sri Ramulu, Harshini
    and Wermke, Dominik and Acar, Yasemin}, year={2023}, pages={56–66} }'
  chicago: 'Sammak, Rami, Anna Lena Rotthaler, Harshini Sri Ramulu, Dominik Wermke,
    and Yasemin Acar. “Developers’ Approaches to Software Supply Chain Security: An
    Interview Study.” In <i>Proceedings of the 2024 Workshop on Software Supply Chain
    Offensive Research and Ecosystem Defenses</i>, 56–66, 2023.'
  ieee: 'R. Sammak, A. L. Rotthaler, H. Sri Ramulu, D. Wermke, and Y. Acar, “Developers’
    approaches to software supply chain security: An interview study,” in <i>Proceedings
    of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem
    Defenses</i>, 2023, pp. 56–66.'
  mla: 'Sammak, Rami, et al. “Developers’ Approaches to Software Supply Chain Security:
    An Interview Study.” <i>Proceedings of the 2024 Workshop on Software Supply Chain
    Offensive Research and Ecosystem Defenses</i>, 2023, pp. 56–66.'
  short: 'R. Sammak, A.L. Rotthaler, H. Sri Ramulu, D. Wermke, Y. Acar, in: Proceedings
    of the 2024 Workshop on Software Supply Chain Offensive Research and Ecosystem
    Defenses, 2023, pp. 56–66.'
date_created: 2026-10-01T16:11:29Z
date_updated: 2026-10-01T16:11:46Z
language:
- iso: eng
page: 56–66
publication: Proceedings of the 2024 Workshop on Software Supply Chain Offensive Research
  and Ecosystem Defenses
status: public
title: 'Developers’ approaches to software supply chain security: An interview study'
type: conference
user_id: '97843'
year: '2023'
...