Mike Just David Aspinall Personal choice and challenge questions: a security and usability assessment. 2009 SOUPS http://doi.acm.org/10.1145/1572532.1572543 conf/soups/2009 db/conf/soups/soups2009.html#JustA09