[blog.rayfoo] Infosec, DFIR, tech geekery, thoughts and whatnot

2May/100

So Long, And No Thanks for the Externalities: The Rational Rejection of Security Advice by Users

A research paper published under Microsoft Research by Cormac Herley, on why users reject much/most/all of the security education and advice given nowadays by security researchers and professionals alike.

Here're the links to the page, PDF [original] [mirror] and Google Docs viewer.  What's below are just my summaries (of the paper) and thoughts on this, if it's of any interest anyway.