Good talk by Lorrie Cranor from Carnegie Mellon University entitled “Conducting Usable Privacy and Security Studies: It’s Complicated”
Main take-away: warning messages are mostly ignored and are starting to be designed differently. They must stand out over system messages in the case of browser vulnerability and other risks that are related to the person’s identity and privacy.