Yeah, so that paper actually grew out of a class project in my usable security class.
And the students were interested in first of all demonstrating that the SSL Warnings
were not working, and second, trying to come up with some alternative designs.
And I think, you know, in their preliminary pilot studies they found that,
that people were, were basically just saying, I've seen this before,
I, it's never been important before, I'm just going to click through it.
Without actually focusing and paying any attention to it.
And so the students started thinking about, well, what can we do to break that?
And the few ideas that they came up with were one
was to make it look really different.
So make it red.
All right?
And then the other is to force an interaction where you can't just click
the button, you have to answer a question.
And so those were the two ideas that they wanted to test and, and
then that's what we ended up implementing.