Did you read the article? It's not about security best practice. It's about human nature and how that relates to security best practice. Until human nature changes this article is going to be pretty close to timeless.
>That all said the sentiment of the article still stands true. Users (like my family) hate worrying about security.
When I said "article" I was talking about the full document which gets directly into security best practice.
http://research.microsoft.com/en-us/um/people/cormac/papers/...
Also HN Comment guidlines indicate you shouldn't ask Did you read the article?
> Please don't insinuate that someone hasn't read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that." https://news.ycombinator.com/newsguidelines.html