Conventional “wisdom” says you “can’t patch stupid”. Well, sometimes conventional wisdom gets it wrong. In this session, we’ll briefly review a case study where examining commonly available data provides insight into why people “behave stupidly”, which enables us to reduce but not eliminate (after all, conventional wisdom is rarely completely wrong) inappropriate infosec related decisions.