-
An excellent paper, well worth your time if your work includes creating security advice ;) While I don't agree that we should measure everything in monetary value, other measures such as user time (also discussed) seem an excellent metric for usability/security trade-of decisions @BenLaurie/1031197313576960000