@mttaggart that's what you get when you let CS people do human related stuff. Have you read usable security papers? I live this nightmare.

(Granted, lots of social scientists also have crappy methodological education, but at least they have _some_)