Security and Human Factors
http://www.useit.com/alertbox/20001126.html

Nielsen, Jakob
Alertbox
2000

Abstract:

A big lie of computer security is that security improves as password complexity increases. In reality, users simply write down difficult passwords, leaving the system vulnerable. Security is better increased by designing for how people actually behave.