I'm thinking of creating an @owasp Top Ten Dumb Things Security Makes Users Do. Here are a few: 1. Making users rotate passwords without evidence of compromise. @TechFTC actually does an awesome job of explaining why it's dumb. ftc.gov/news-events/blogs/te…

Minor irritant: Disabling Right Click 😉

Oh yes, so that way you can't see the page's source.