Re: [Tails-ux] Questions for VeraCrypt user research

u:
>> And here are the questions I could come up with so far:
>>
>> Success:
>>
>> - How many people use VeraCrypt in Tails after our work in comparison
>> with before?
>> - How many people who were using VeraCrypt outside of Tails but couldn't
>> use it in Tails can use it after our work?
>
> This would require to make two surveys, one before, one after, in order
> to compare the results, right?

Yes! The second survey would probably be only parts of the first one.

>> Scope:
>>
>> - Which fraction of VeraCrypt volume are encrypted file containers?
>> encrypted partitions?
>> - Are people encrypting their full operating system with VeraCrypt?
>> - Which fraction of users are using hidden volumes?
>> - Which fraction of users are using keyfiles? Why? How?
>>
>> Behaviors:
>>
>> - Do people share files between Tails and their regular operating
>> system? Why? How?
>
> This might also be a question which can be asked before and after
> implementation.
>
> You might also want to ask what their main OS is in that case.

Yeap. And that's always a question I wanted to ask to Tails users :)

Still, we should always keep surveys as short as possible so I'll
refrain from asking too many "curiosity" questions; although this one
should be very quick and easy to answer. I'll see.

>> - Can we rely on file containers having a .tc or .hc extension?
>
> I don't understand this question.

VeraCrypt file containers can be named using a .hc (.tc for TrueCrypt)
file extension and being able to rely on this might facilitate the
detection process (which has been a central concern so far).

>> Anything else I'm missing? Any question that is badly framed?
>
> It could be interesting to ask if they knew VeraCrypt before,

The idea is to survey only people who already use VeraCrypt in order to
understand their habits.

> if they used TrueCrypt in the past.

This also relates to what segfault said about people still relying on
the old TrueCrypt format ("TrueCrypt mode" checkbox in VeraCrypt).

> If they know that our persistence uses LUKS.
> How they self evaluate their knowledge about disk encryption.
> I think this could help to better understand their file sharing behavior.

It's usually very tricky and leads to a lot of biased answers to ask
people to self-report their technical knowledge. For example, confident
people who know less might report more knowledge than better informed
but careful people who acknowledge their ignorance.

If we want to know about their level of technical knowledge we should do
this indirectly somehow. I'll think about that!