What happens when people get tired of cybersecurity? Dr. Andrew Reeves from the UNSW Institute for Cyber Security joins us to explore how psychological principles—like fatigue, reactance, and decision-making under pressure—shape both how users engage with cybersecurity and how attackers and defenders can exploit them. We talk about what goes wrong with security training, why users push back against well-meaning policies, and how simple design choices can reduce cognitive load and increase compliance. Dr. Reeves also shares his work on cyber deception and how defenders can turn the tables, using stress, uncertainty, and time pressure to mislead attackers inside networks. This episode weaves together user behavior, system design, and attacker psychology into a broader conversation about how we shape—and are shaped by—the security systems we live with.