security vs usability eg how more stringent password requirements have made passwords harder to remember so the system is less useable - then loops back round to low security as people write them down or repeat one ...