There’s an important point to be made here about the gap between theoretical and practical security. Overly elaborate password policies (excessive complexity demands, passwords expiring, no reusing last five passwords) end up causing annoyed users to make bad decisions that compromise password security.
Similarly, an excess of popups doesn’t increase security. It annoys users to the point they stop thinking about individual security decisions.
There’s an important intersection of security research and HCI that doesn’t get discussed as much as it needs to be.
Similarly, an excess of popups doesn’t increase security. It annoys users to the point they stop thinking about individual security decisions.
There’s an important intersection of security research and HCI that doesn’t get discussed as much as it needs to be.