Microsoft Paper: The Rational Rejection of Security Advice

Sorry if this paper has already been posted. I read it through and even though it is a bit lengthy I thought there were some interesting points that the author made. The paper can be seen here: http://research.microsoft.com/en-us/um/people/cormac/papers/2009/SoLongAndNoThanks.pdf