Are these 'expert' users at higher risk because of a false sense of security, or because they are naturally curious and therefore more risk-tolerant? Two Polytechnique academics apply clinical trial method to the design of a first-of-its-kind study on computer security.