Many ignored warnings they received, found the US National Institute of Standards and Technology (NIST).
Others were worn out by software updates and by the number of passwords they had to remember, NIST found.
This "risky behaviour" might make people more susceptible to attack, it warned.
Inevitable attack
