[ObviousScience]

But his analysis applies even to highly technical users, for whom the problem is clearly not understanding.

The reality is I had an argument about why we should be writing down passwords at work, because the projected security benefit of preventing a full breach is still less than the expected benefit of not losing our data all the time.

Could we have set up a better, more technical PKI than notes in the safe? Probably. But I'm not sure it would get us ahead on the cost/benefit curve.

Real security is about separating your porn watching from your banking; not about doing your porn watching to the security standards of your banking.

tl;dr: No, dancing pigs are always more amusing. No one wants to live in a perfectly safe box.

[jorgeleo]

I think that we are two sides of the same apple. I completely agree with you. I think that your argument is sound in terms of technology implementation.

My argument talks about motivation, not implementation.