I gave the keynote talk at the Learning from Authoritative Security Experiment Results at the Annual Computer Security Applications Conference, organized by David Balenson.