Two decades ago, studies showed that computer users were violating best practices for setting up hack-proof passwords, and not much has changed since then. What’s clear, say researchers , is that until human factors/ergonomics methods are applied to the problem, it isn’t likely to go away.