1. What heuristics and biases you employ in making cybersecurity decisions?
2. Are you more likely to reply/share/retweet to misinformation than to post information? Why did you answer that way? Why might someone answer the other way?
3. Scenario: You encounter a post with a soft-moderation label on Twitter saying that the content of the Tweet might be a misinformation. What are the costs/benefits for you to engage with it? What the costs/benefits for Twitter to apply such soft moderation?
4. Scenario: You are assigned to be a Chief Anti-Misinformation Officer in a company. What actions will you take and how will you prioritize among them?
5. How can an end-user tell whether their account is secure? What factors might lead a person to believe that an account was secure when it wasn't?