A Study of Authentication in Daily Life
So long, and no thanks for the externalities: the rational rejection of security advice by users