Why you shouldn't train employees for security awareness | Hacker News Reader