USENIX Security2021Top-tier venue
"Shhh...be quiet!" Reducing the Unwanted Interruptions of Notification Permission Prompts on Chrome
Igor Bilogrevic, Balazs Engedy, Judson L. Porter III, Nina Taft, Kamila Hasanbega, Andrew Paseltiner, Hwi Kyoung Lee, Edward Jung, Meggyn Watkins, P. J. McLachlan, Jason James
Abstract
Push notifications can be a very useful feature. On web browsers, they allow users to receive timely updates even if the website is not currently open. On Chrome, the feature has become extremely popular since its inception in 2015, but it is also the least likely to be accepted by users. Chrome telemetry shows that, although 74% of all permission prompts are about notifications, they are also the least likely to be granted with only a 10% grant rate on desktop and 21% grant rate on Android. In order to preserve its utility for websites and to reduce unwanted interruptions and potential abuses for the users, we designed and tested both a novel UI and its activation mechanism for notification permission prompts in Chrome.
To understand how users interact with such prompts, we conducted two large-scale studies with more than 300 million users in the wild. The first study showed that most of them block or ignore the prompts across all types of websites, which prompted us to rethink its UI and activation logic. The second study, based on an A/B test using behavioral data from more than 40 million users who interacted with more than 100 million prompts on more than 70 thousand websites, show that the new prompt is very effective at reducing unwanted interruptions and their frequency (up to 30% fewer unnecessary actions on the prompts), with a minimal impact (less than 5%) on the grant rates, across all types of users and websites. We achieve these results thanks to a novel adaptive activation mechanism coupled with a block list of interrupting websites, which is derived from crowd-sourced telemetry from Chrome clients.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext f697b86e-da5a-4548-87ab-a46e70e3d626Cited by top-tier papers3
- Towards Automating Data Access Permissions in AI AgentsYuhao Wu, Ke Yang, Franziska Roesner, Tadayoshi Kohno et al.S&P 2026 · 22 citations
- Permission Rationales in the Web Ecosystem: An Exploration of Rationale Text and Design PatternsYusra Elbitar, Soheil Khodayari, Marian Harbach, Gianluca De Stefano et al.CHI 2025 · 3 citations
- Predictive Response Optimization: Using Reinforcement Learning to Fight Online Social Network AbuseGarrett Wilson, Geoffrey Goh, Yan Jiang, Ajay Gupta et al.USENIX Security 2025
Builds on2
- Pride and Prejudice in Progressive Web Apps: Abusing Native App-like Features in Web ApplicationsJiyeon Lee, Hayeon Kim, Junghwan Park, Insik Shin et al.CCS 2018 · 40 citations
- A Comprehensive Quality Evaluation of Security and Privacy Advice on the WebElissa M. Redmiles, Noel Warford, Amritha Jayanti, Aravind Koneru et al.USENIX Security 2020
Related papers
- Don't Interrupt Me - A Large-Scale Study of On-Device Permission Prompt Quieting in ChromeMarian Harbach, Igor Bilogrevic, Enrico Bacis, Serena Chen et al.NDSS 2024
- Websites Need Your Permission Too - User Sentiment and Decision-Making on Web Permission Prompts in Desktop ChromeMarian HarbachCHI 2024 · 3 citations
- (Un)informed Consent: Studying GDPR Consent Notices in the FieldChristine Utz, Martin Degeling, Sascha Fahl, Florian Schaub et al.CCS 2019 · 429 citations
- Browser Permission Mechanisms DemystifiedKazuki Nomoto, Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama et al.NDSS 2023
- Understanding the Performance Costs and Benefits of Privacy-focused Browser ExtensionsKevin Borgolte, Nick FeamsterWWW 2020 · 21 citations
